Intrusion Detection System

[ZiNgA BuRgA]

(02-10-2011 05:16 AM)trialnick Wrote:  well, not so many at all. One should remove select, insert ....

So if someone searches for, say, "select" or "insert", their request gets mysteriously blocked?
And blocking those isn't really good against SQL injection anyway.  PHP's mysql extension prevents multiple queries.  Perhaps the only thing it really blocks is a UNION SELECT injection, but blocking INSERT is practically useless.  I can't think of any likely (MySQL) query where INSERT would be good for injection.