John works as a Professional Penetration Tester.

Vendor: GIAC
Product: GPEN
Update on: Jul 25, 2025
Questions: 385

GIAC GPEN Question Answer

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters= 'or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-are-secure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are-secure Website login page from the SQL injection attack?

Use the session_regenerate_id() function

Use the escapeshellcmd() function

Use the mysql_real_escape_string() function for escaping input

Use the escapeshellarg() function