{"id":7139,"date":"2022-05-23T18:24:20","date_gmt":"2022-05-23T15:24:20","guid":{"rendered":"https:\/\/www.niobehosting.com\/blog\/?p=7139"},"modified":"2022-05-23T18:24:23","modified_gmt":"2022-05-23T15:24:23","slug":"sql-injection","status":"publish","type":"post","link":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/","title":{"rendered":"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir?"},"content":{"rendered":"\n<p>SQL injections ya da SQL enjeksiyonlar\u0131, en yayg\u0131n ve temel siber sald\u0131r\u0131 t\u00fcrleri aras\u0131ndad\u0131r. Ne yaz\u0131k ki, bir SQL enjeksiyonu ayn\u0131 zamanda bir uygulaman\u0131n kar\u015f\u0131la\u015fabilece\u011fi en y\u0131k\u0131c\u0131 tehditlerden biridir. Bu sald\u0131r\u0131lar d\u00fczenli olarak veri kay\u0131plar\u0131na yol a\u00e7ar ve \u00f6zellikle payla\u015f\u0131lan veri tabanlar\u0131na sahip altyap\u0131lar i\u00e7in tehlikelidir.<\/p>\n\n\n\n<p><strong>SQL <\/strong>enjeksiyonunun tan\u0131m\u0131 k\u0131saca bu \u015fekilde\u2026<\/p>\n\n\n\n<p>\u015eimdi SQL Injection ile ilgili detaylara ge\u00e7ebiliriz. Fakat \u00f6ncesinde SQL tam olarak nedir, bu konuya de\u011finelim.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SQL Nedir?<\/h2>\n\n\n\n<p>SQL (Structured Query Language) yani Yap\u0131land\u0131r\u0131lm\u0131\u015f Sorgu Dili, kullan\u0131c\u0131lar\u0131n veri tabanlar\u0131yla etkile\u015fim kurmas\u0131n\u0131 sa\u011flayan bir sorgu dilidir. \u00d6rne\u011fin, oturum a\u00e7ma alanlar\u0131 ve formlar\u0131 genellikle bir SQL veri taban\u0131na ba\u011flan\u0131r. Kullan\u0131c\u0131lar, adlar\u0131n\u0131 ve \u015fifrelerini girerek bir web sitesinin korumal\u0131 bir b\u00f6l\u00fcm\u00fcnde oturum a\u00e7abilir. SQL, daha sonra kullan\u0131c\u0131lar i\u00e7in i\u00e7eri\u011fi al\u0131rken oturum a\u00e7ma kimlik bilgilerini i\u015fler.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SQL Injection T\u00fcrleri<\/h2>\n\n\n\n<p>Bir t\u00fcr sald\u0131r\u0131 vekt\u00f6r\u00fc olan SQL injection, sald\u0131rganlar\u0131n back-end verilerine eri\u015fmek i\u00e7in kulland\u0131klar\u0131 y\u00f6ntemlere g\u00f6re s\u0131n\u0131fland\u0131r\u0131l\u0131r.&nbsp;<\/p>\n\n\n\n<p>A\u015fa\u011f\u0131da, bir i\u015fletmenin kar\u015f\u0131la\u015fabilece\u011fi en yayg\u0131n yedi SQL enjeksiyonu t\u00fcr\u00fcn\u00fc bulabilirsiniz:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">In-Band SQLi (Klasik SQLi)<\/h3>\n\n\n\n<p>Bir bilgisayar korsan\u0131 sald\u0131r\u0131y\u0131 ba\u015flatmak ve sonu\u00e7lar\u0131 toplamak i\u00e7in ayn\u0131 ileti\u015fim kanal\u0131n\u0131 kulland\u0131\u011f\u0131nda In-Band SQLi olu\u015fur.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Error-Based SQLi<\/h3>\n\n\n\n<p>Hata tabanl\u0131 SQLi, hata mesajlar\u0131na dayanan bir in-band enjeksiyon tekni\u011fidir. Bilgisayar korsanlar\u0131, veri taban\u0131 yap\u0131s\u0131 hakk\u0131nda bilgi toplamak i\u00e7in uygulamay\u0131 s\u00fcrekli olarak hatalar i\u00e7in ara\u015ft\u0131r\u0131r.<\/p>\n\n\n\n<p>Hata tabanl\u0131 SQL enjeksiyonlar\u0131, bir sald\u0131rgan\u0131n tablo adlar\u0131 ve i\u00e7erik gibi verileri g\u00f6r\u00fcn\u00fcr hatalardan almas\u0131na olanak tan\u0131r. Baz\u0131 durumlarda, bir bilgisayar korsan\u0131n\u0131n t\u00fcm veri taban\u0131n\u0131 numaraland\u0131rmas\u0131 i\u00e7in hata tabanl\u0131 SQL enjeksiyonu yeterlidir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Union-Based SQLi<\/h3>\n\n\n\n<p>Union tabanl\u0131 SQLi, UNION SQL operat\u00f6r\u00fcn\u00fcn g\u00fcvenlik a\u00e7\u0131klar\u0131ndan yararlanan bir in-band enjeksiyondur.<\/p>\n\n\n\n<p>UNION komutu, bir veya daha fazla ek SELECT sorgusu y\u00fcr\u00fct\u00fcr ve sonucu orijinal sorguya ekler. Sald\u0131rgan, veri taban\u0131ndaki di\u011fer tablolardan veri almak i\u00e7in geni\u015fletilmi\u015f sonu\u00e7lardan yararlanabilir.<\/p>\n\n\n\n<p>Union tabanl\u0131 SQLi, yaln\u0131zca orijinal ve yeni sorgular ayn\u0131 say\u0131da ve veri t\u00fcr\u00fcnde s\u00fctunlara sahipse \u00e7al\u0131\u015f\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Inferential SQLi&nbsp;<\/h3>\n\n\n\n<p>\u00c7\u0131kar\u0131msal bir SQLi&#8217;da, web uygulamas\u0131 verileri do\u011frudan \u00e7\u0131kt\u0131 yoluyla aktarmaz. Bunun yerine, bir sald\u0131rgan, y\u00fckleri g\u00f6ndererek ve a\u015fa\u011f\u0131dakileri g\u00f6zlemleyerek bilgi toplar:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Web uygulamas\u0131n\u0131n yan\u0131t\u0131<\/li><li>Veri taban\u0131 sunucusunun davran\u0131\u015f\u0131<\/li><li>Web sayfas\u0131ndaki farkl\u0131l\u0131klar<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Content-Based Blind SQLi<\/h3>\n\n\n\n<p>\u0130\u00e7erik tabanl\u0131 SQLi\u2019da, sald\u0131rgan\u0131n, sorgunun DO\u011eRU veya YANLI\u015e sonu\u00e7 d\u00f6nd\u00fcrmesine ba\u011fl\u0131 olarak veri taban\u0131n\u0131 farkl\u0131 sonu\u00e7lar i\u00e7in d\u00f6nd\u00fcrmeye zorlad\u0131\u011f\u0131 \u00e7\u0131kar\u0131msal bir tekniktir. \u0130\u00e7erik tabanl\u0131 SQLi sald\u0131r\u0131lar\u0131, \u00f6zellikle b\u00fcy\u00fck veri tabanlar\u0131nda yava\u015ft\u0131r. Sald\u0131rgan, veri taban\u0131n\u0131 karakter karakter numaraland\u0131rmal\u0131d\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Time-Based Blind SQLi<\/h3>\n\n\n\n<p>Zamana dayal\u0131 SQLi\u2019da, sald\u0131rgan, yan\u0131t vermeden \u00f6nce veri taban\u0131n\u0131 belirli bir s\u00fcre beklemeye (uykuya) zorlayan sorgular g\u00f6nderir.<\/p>\n\n\n\n<p>\u00d6rne\u011fin, bir bilgisayar korsan\u0131, admin hesab\u0131n\u0131n ilk harfinin A ile ba\u015flay\u0131p ba\u015flamad\u0131\u011f\u0131n\u0131 veri taban\u0131na sorabilir. \u0130lk harf A ise, bilgisayar korsan\u0131 veri taban\u0131na 10 saniye uyumas\u0131 talimat\u0131n\u0131 verir.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Out-of-Band SQLi<\/h3>\n\n\n\n<p>Out-of-Band SQLi, genellikle bir bilgisayar korsan\u0131 do\u011frudan bir sorgu-yan\u0131t sald\u0131r\u0131s\u0131 ba\u015flatamad\u0131\u011f\u0131nda ger\u00e7ekle\u015fen daha az yayg\u0131n olan bir Injection t\u00fcr\u00fcd\u00fcr.\u00a0<\/p>\n\n\n\n<p>Out-of-Band SQLi\u2019da, bir bilgisayar korsan\u0131, sald\u0131rgan\u0131n kontrol\u00fc alt\u0131ndaki harici bir sunucuya ba\u011flant\u0131 olu\u015fturmak i\u00e7in veri taban\u0131n\u0131 tetikleyen SQL ifadeleri olu\u015fturur.<\/p>\n\n\n\n<p>Veri taban\u0131 sunucusunun, bir sald\u0131rgana veri teslim etmek i\u00e7in DNS veya HTTP istekleri yapabilme becerisine sahip olmas\u0131 gerekir. Aksi takdirde, out-of-band SQLi \u00e7al\u0131\u015fmaz.<\/p>\n\n\n\n<p>Sald\u0131rganlar, sunucu yan\u0131tlar\u0131 karars\u0131z oldu\u011funda, zamana dayal\u0131 tekniklere alternatif olarak genellikle bant d\u0131\u015f\u0131 bir yakla\u015f\u0131m se\u00e7er.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SQL Injection Sald\u0131r\u0131lar\u0131 Nas\u0131l Ger\u00e7ekle\u015ftirilir?<\/h2>\n\n\n\n<p>Bir SQL injection sald\u0131r\u0131s\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in sald\u0131rgan\u0131n bir web uygulamas\u0131nda veya web sayfas\u0131nda g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulunan bir giri\u015f bulmas\u0131 gerekir. Bir uygulama veya web sayfas\u0131 bir SQL Injection g\u00fcvenlik a\u00e7\u0131\u011f\u0131 i\u00e7erdi\u011finde, do\u011frudan bir SQL sorgusu bi\u00e7iminde kullan\u0131c\u0131 girdisini kullan\u0131r. Bilgisayar korsan\u0131, \u00f6zel olarak haz\u0131rlanm\u0131\u015f bir SQL komutunu k\u00f6t\u00fc niyetli bir siber sald\u0131r\u0131 olarak \u00e7al\u0131\u015ft\u0131rabilir. Ard\u0131ndan, k\u00f6t\u00fc ama\u00e7l\u0131 koddan yararlanan bilgisayar korsan\u0131, veri taban\u0131 yap\u0131s\u0131 hakk\u0131nda net bir fikir sa\u011flayan ve b\u00f6ylece veri taban\u0131ndaki t\u00fcm bilgilere eri\u015fim sa\u011flayan bir yan\u0131t elde edebilir.<\/p>\n\n\n\n<p>SQL, veri taban\u0131na ileti\u015fim yolu olarak hizmet eder. SQL ifadeleri, veri taban\u0131ndaki verileri almak ve g\u00fcncellemek i\u00e7in kullan\u0131l\u0131r. Sald\u0131rganlar giri\u015f kutusunda k\u00f6t\u00fc niyetli SQL ifadeleri kullan\u0131r ve buna kar\u015f\u0131l\u0131k olarak veri taban\u0131 hassas bilgiler sunar. Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131, bir web sitesinin veya uygulaman\u0131n yetkisiz verilerine eri\u015fmeyi ama\u00e7lar. Birka\u00e7 web sitesi ve web uygulamas\u0131, verileri SQL veri tabanlar\u0131nda depolar. Bu uygulamalardan herhangi biri i\u00e7in, SQL enjeksiyonunu y\u00fcr\u00fctmek i\u00e7in hi\u00e7bir bo\u015fluk olmad\u0131\u011f\u0131ndan emin olmak i\u00e7in g\u00fcvenlik a\u00e7\u0131\u011f\u0131 testi yapman\u0131z gerekir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SQL Injection G\u00fcvenlik A\u00e7\u0131klar\u0131 Nas\u0131l Tespit Edilir?<\/h2>\n\n\n\n<p>SQL injection giri\u015fimleri genellikle standart veri taban\u0131 hatalar\u0131 olarak g\u00f6r\u00fcn\u00fcr, bu nedenle enjeksiyonlar\u0131 ara\u00e7lar olmadan tespit etmek zordur. Ancak, g\u00fcvenlik ekibiniz SQL enjeksiyonlar\u0131n\u0131n belirtilerini izleyebilir.<\/p>\n\n\n\n<p>Her SQL injection deneme yan\u0131lma i\u00e7erir. Bilgisayar korsanlar\u0131 genellikle bir web sitesini kusurlar i\u00e7in tekrar tekrar ara\u015ft\u0131rmak i\u00e7in bir solucan veya bot kurar. Bu y\u00fczden ba\u015far\u0131s\u0131z oturum a\u00e7malar\u0131 ve hatal\u0131 s\u00f6zdizimi hatalar\u0131n\u0131 izlemek i\u00e7in tarama ara\u00e7lar\u0131n\u0131z\u0131 ayarlad\u0131\u011f\u0131n\u0131zdan emin olun.&nbsp;<\/p>\n\n\n\n<p>SQL enjeksiyonlar\u0131n\u0131 alg\u0131laman\u0131n di\u011fer yollar\u0131 ise a\u015fa\u011f\u0131daki \u015fekildedir:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Tek hatalar i\u00e7in error_reported olay\u0131n\u0131 inceleyin. http-equiv=&#8221;refresh&#8221; veya iframe gibi yayg\u0131n HTML etiketleri i\u00e7in veri taban\u0131nda arama yap\u0131n.<\/li><li>Davran\u0131\u015ftaki \u015f\u00fcpheli de\u011fi\u015fiklikler, \u00f6zellikle izinler ve \u015fifrelerdeki de\u011fi\u015fiklikler i\u00e7in trafi\u011fi izleyin.<\/li><li>Veri taban\u0131 sunucusuna yap\u0131lan ba\u011flant\u0131lar\u0131 izlemek i\u00e7in a\u011f tabanl\u0131 bir sald\u0131r\u0131 tespit sistemi (IDS) kurun.<\/li><li>Web sunucusu g\u00fcnl\u00fcklerini izlemek i\u00e7in ana bilgisayar tabanl\u0131 bir IDS kurun.<\/li><li>Uygulaman\u0131z\u0131n SQLi ve benzeri siber sald\u0131r\u0131lara kar\u015f\u0131 g\u00fcvende oldu\u011fundan emin olmak i\u00e7in g\u00fcvenlik a\u00e7\u0131\u011f\u0131 de\u011ferlendirme ara\u00e7lar\u0131n\u0131 kullan\u0131n.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">SQL Injection Nas\u0131l \u00d6nlenir?<\/h2>\n\n\n\n<p>Kullan\u0131c\u0131lar\u0131n SQL injection sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek i\u00e7in yapabilecekleri bir dizi \u00f6nlem vard\u0131r. Bu \u00f6nlemler a\u015fa\u011f\u0131dakileri i\u00e7erir:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Do\u011frulama<\/h3>\n\n\n\n<p>Kullan\u0131c\u0131 giri\u015flerini kontrol etme ve filtreleme uygulamas\u0131d\u0131r. Bu teknik, uygulaman\u0131n yasal olmayan kullan\u0131c\u0131 girdilerini ve tehlikeli y\u00fcr\u00fct\u00fclebilir dosyalar\u0131 tan\u0131mlayabilmesini sa\u011flar.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Parametreli SQL kodu<\/h3>\n\n\n\n<p>Parametreli sorgular, geli\u015ftiricilerin \u00f6nce t\u00fcm SQL kodunu tan\u0131mlamas\u0131n\u0131 ve her parametreyi daha sonra sorguya ge\u00e7irmesini gerektirir. Bu kodlama stili, veri taban\u0131n\u0131n kod ve veri aras\u0131nda ayr\u0131m yapmas\u0131n\u0131 sa\u011flar; bu, dinamik SQL sorgular\u0131yla m\u00fcmk\u00fcn olmayan bir \u00f6zelliktir.<\/p>\n\n\n\n<p>Parametreli SQL kodu, sald\u0131rganlar\u0131n komut ekleseler bile sorgunun amac\u0131n\u0131 de\u011fi\u015ftirmesini engeller<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Kullan\u0131c\u0131 izinlerini s\u0131n\u0131rlay\u0131n<\/h3>\n\n\n\n<p>Zero Trust g\u00fcvenli\u011fi kullan\u0131n ve kullan\u0131c\u0131lar\u0131 rollerini yerine getirmek i\u00e7in ihtiya\u00e7 duyduklar\u0131 minimum izinlerle s\u0131n\u0131rlay\u0131n.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Sakl\u0131 prosed\u00fcrler<\/h3>\n\n\n\n<p>Do\u011fru kullan\u0131ld\u0131\u011f\u0131nda, sakl\u0131 prosed\u00fcrlerin kullan\u0131m\u0131 SQL enjeksiyonlar\u0131n\u0131n olas\u0131l\u0131\u011f\u0131n\u0131 azaltabilir. Bu, Java, .NET, PHP ve di\u011ferleri dahil olmak \u00fczere programlama dilleriyle ger\u00e7ekle\u015ftirilebilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">G\u00fcvenli kodlama<\/h3>\n\n\n\n<p>Web uygulama g\u00fcvenli\u011fini art\u0131rmak i\u00e7in \u015firketlerin g\u00fcvenli kodlama uygulamalar\u0131na ba\u015fvurmalar\u0131 zorunludur.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">D\u00fczenli g\u00fcncelleme ve yama<\/h3>\n\n\n\n<p>Web uygulamalar\u0131ndaki ve veri tabanlar\u0131ndaki g\u00fcvenlik a\u00e7\u0131klar\u0131 sald\u0131rganlar\u0131n SQL enjeksiyonlar\u0131n\u0131 kullanarak yararlanabilece\u011fi bir \u015feydir. Bu y\u00fczden uygulamalar ve veri tabanlar\u0131 i\u00e7in yamalar ve g\u00fcncellemeler yay\u0131nland\u0131k\u00e7a, kullan\u0131c\u0131lar m\u00fcmk\u00fcn olan en k\u0131sa s\u00fcrede g\u00fcncellemeleri yapmal\u0131d\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">G\u00fcvenlik Duvar\u0131<\/h3>\n\n\n\n<p>Web Uygulamas\u0131 <a href=\"https:\/\/www.niobehosting.com\/blog\/firewall\/\">G\u00fcvenlik Duvarlar\u0131<\/a> (WAF), web uygulamalar\u0131 ile internet aras\u0131ndaki trafi\u011fi filtreleyerek ve izleyerek web uygulamalar\u0131n\u0131n korunmas\u0131na yard\u0131mc\u0131 olur. WAF&#8217;ler, SQL enjeksiyonlar\u0131 dahil olmak \u00fczere sald\u0131r\u0131lara kar\u015f\u0131 bir savunma sa\u011flayabilir. Bir SQL Injection g\u00fcvenlik a\u00e7\u0131\u011f\u0131 a\u00e7\u0131k kaynak kodunda olabilir ve bu durumda bir WAF&#8217;ye sahip olmak ge\u00e7ici olarak korumaya yard\u0131mc\u0131 olabilir. Ek olarak WAF, yamalar geli\u015ftirilirken yeni g\u00fcvenlik a\u00e7\u0131klar\u0131na kar\u015f\u0131 koruma da sa\u011flayabilir.<\/p>\n\n\n\n<p>E\u011fer teknik bilginiz yoksa, alan ad\u0131n\u0131z\u0131 Cloudflare \u00fczerinden \u00e7al\u0131\u015ft\u0131rarak burada bulunan \u00fccretsiz WAF ve SQL injection sald\u0131r\u0131lar\u0131n\u0131, temel d\u00fczeyde \u00f6nleyecek \u00f6nlemleri de aktif edebilirsiniz.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">WordPress Sitenizi SQL Injection Sald\u0131r\u0131lar\u0131ndan Nas\u0131l Korursunuz?<\/h2>\n\n\n\n<p>G\u00fcncel WordPress dosyalar\u0131n\u0131 kullan\u0131yorsan\u0131z, herhangi bir SQL Injection g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan korunursunuz. Ancak \u00fc\u00e7\u00fcnc\u00fc taraf tema ve eklentileri kulland\u0131\u011f\u0131n\u0131zda t\u00fcm uygulaman\u0131z risk alt\u0131ndad\u0131r.<\/p>\n\n\n\n<p>WordPress teman\u0131zda veya eklentinizde SQL injection&#8217;\u0131n g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 azaltmak i\u00e7in izlemeniz gereken tek kural, veri taban\u0131yla etkile\u015fim kurarken her zaman mevcut WordPress i\u015flevlerini kullanmakt\u0131r.<\/p>\n\n\n\n<p>Bu i\u015flevler, WordPress geli\u015ftirme s\u00fcreci s\u0131ras\u0131nda SQL Injection g\u00fcvenlik a\u00e7\u0131klar\u0131 i\u00e7in kapsaml\u0131 bir \u015fekilde test edilir. \u00d6rne\u011fin, bir g\u00f6nderiye yorum eklemek istiyorsan\u0131z, verileri do\u011frudan wp_comments tablosuna eklemek yerine wp_insert_comment() i\u015flevini kullanabilirsiniz.<\/p>\n\n\n\n<p>\u0130\u015flevler geni\u015fletilebilir olsa da, bazen karma\u015f\u0131k bir sorgu \u00e7al\u0131\u015ft\u0131rman\u0131z gerekebilir. B\u00f6yle bir durumda, $wp_db i\u015flev grubunu kulland\u0131\u011f\u0131n\u0131zdan emin olun. Sorguyu olu\u015fturmadan \u00f6nce kullan\u0131c\u0131 giri\u015finden ka\u00e7mak i\u00e7in $wpdb-&gt;prepare() kullanabilirsiniz.<\/p>\n\n\n\n<p>Ayr\u0131ca ThreatPass ve WPScan Vulnerability Database gibi bir \u00e7evrimi\u00e7i tarama arac\u0131 da kullanabilirsiniz. Geli\u015ftirmelerinin durup durmad\u0131\u011f\u0131n\u0131 g\u00f6rmek i\u00e7in eklentilerinizi de denetleyebilirsiniz.<\/p>\n\n\n\n<p>Hala bunlar\u0131 kesinlikle kullanman\u0131z gerekiyorsa, g\u00fcvenlik a\u00e7\u0131klar\u0131 i\u00e7in kod ve i\u015flevlerini kapsaml\u0131 bir \u015fekilde test etti\u011finizden emin olun. Bunun d\u0131\u015f\u0131nda, a\u015fa\u011f\u0131daki kontrolleri de uygulad\u0131\u011f\u0131n\u0131zdan emin olun:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>PHP, WordPress \u00e7ekirde\u011fi ve MySQL&#8217;i g\u00fcncelleyin.<\/li><li>\u00dc\u00e7\u00fcnc\u00fc taraf eklentileri ve temalar\u0131 g\u00fcncelleyin.<\/li><li>SQL veri taban\u0131n\u0131 ba\u011flamak i\u00e7in k\u00f6k kullan\u0131c\u0131y\u0131 kullanmaktan ka\u00e7\u0131n\u0131n.<\/li><li>SQL kullan\u0131c\u0131s\u0131n\u0131n eri\u015fimlerini hassas dizinlerle s\u0131n\u0131rlay\u0131n.<\/li><li>Sunucunuzu kullanarak SQL anahtar kelimelerini engelleyin.<\/li><li>Geri d\u00f6n\u00fc\u015f\u00fc olmayan hasar durumunda sitenizin yedeklerini site d\u0131\u015f\u0131nda tutun.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Siteniz i\u00e7in kullanabilece\u011finiz WordPress g\u00fcvenlik eklentileri<\/h3>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>1. Wordfence<\/strong><\/h3>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"300\" src=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/wordfence.jpeg\" alt=\"\" class=\"wp-image-7141\" srcset=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/wordfence.jpeg 750w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/wordfence-300x120.jpeg 300w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/wordfence-100x40.jpeg 100w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/wordfence-700x280.jpeg 700w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure><\/div>\n\n\n\n<p>3 milyondan fazla aktif kurulum ile <a href=\"https:\/\/wordpress.org\/plugins\/wordfence\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Wordfence<\/a>, siteler i\u00e7in en pop\u00fcler g\u00fcvenlik ara\u00e7lar\u0131 aras\u0131nda yer al\u0131r. Ara\u00e7, web uygulamas\u0131 g\u00fcvenlik duvarlar\u0131, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m imzas\u0131 alg\u0131lama, ger\u00e7ek zamanl\u0131 IP kara listeye alma ve sunucu tabanl\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 gibi \u00f6zelliklerle doludur.<\/p>\n\n\n\n<p>Fakat, Wordfence web sunucunuzu a\u015f\u0131r\u0131 y\u00fckleyebilir, b\u00f6ylece web sitenizi yava\u015flatabilir.&nbsp;<\/p>\n\n\n\n<p><strong>\u00d6zellikler<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>En yeni k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m imzalar\u0131 ve hatal\u0131 IP adresleriyle web sitenizi g\u00fcvende tutan bir tehdit savunmas\u0131 ak\u0131\u015f\u0131<\/li><li>\u015e\u00fcpheli IP adreslerinden gelen t\u00fcm istekleri engelleyebilen ger\u00e7ek zamanl\u0131 IP kara listeye alma \u00f6zelli\u011fi<\/li><li>Ba\u015far\u0131s\u0131z oturum a\u00e7ma k\u0131s\u0131tlamalar\u0131 yoluyla sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma<\/li><li>Eklentiler ve temalar, SEO spam&#8217;leri ve kod enjeksiyonlar\u0131 i\u00e7in k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>2. All in One WP Security &amp; Firewall<\/strong><\/h3>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"300\" src=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/all-in-one-wp-security-and-firewall.jpeg\" alt=\"\" class=\"wp-image-7140\" srcset=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/all-in-one-wp-security-and-firewall.jpeg 750w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/all-in-one-wp-security-and-firewall-300x120.jpeg 300w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/all-in-one-wp-security-and-firewall-100x40.jpeg 100w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/all-in-one-wp-security-and-firewall-700x280.jpeg 700w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure><\/div>\n\n\n\n<p>D\u00fcnya \u00e7ap\u0131nda 900.000&#8217;den fazla aktif kurulum ile <a href=\"https:\/\/wordpress.org\/plugins\/all-in-one-wp-security-and-firewall\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">All in One WP Security<\/a>, bug\u00fcn piyasadaki en kapsaml\u0131 g\u00fcvenlik ara\u00e7lar\u0131 aras\u0131ndad\u0131r. Kurulumu ve kullan\u0131m\u0131 kolay g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc, temel, orta ve ileri d\u00fczey WordPress kullan\u0131c\u0131lar\u0131 i\u00e7in tasarlanm\u0131\u015ft\u0131r. Ara\u00e7, yerle\u015fik bir g\u00fcvenlik duvar\u0131 ile birlikte sitenizdeki yayg\u0131n g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kontrol eder ve \u00f6nerilen g\u00fcvenlik uygulamalar\u0131n\u0131 uygular.<\/p>\n\n\n\n<p><strong>\u00d6zellikler<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Genel web sitenizin g\u00fcvenli\u011fini derecelendiren g\u00fcvenlik derecelendirme sistemi<\/li><li>Sald\u0131r\u0131lar\u0131ndan korunmak i\u00e7in giri\u015f kilitleme \u00f6zelli\u011fi<\/li><li>Otomatik yedeklemeler ve e-posta tabanl\u0131 bildirimler arac\u0131l\u0131\u011f\u0131yla veri taban\u0131 g\u00fcvenli\u011fi<\/li><li>wp-config.php ve .htaccess&nbsp; backend dosyalar\u0131n\u0131n yedeklenmesi<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">SQL Injection Kod \u00d6rnekleri<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Sistemin her zaman True olarak de\u011ferlendirdi\u011fi 1=1&#8217;e dayal\u0131 SQL enjeksiyonu<\/h3>\n\n\n\n<p>Burada hacker, bir ko\u015ful do\u011fru olarak de\u011ferlendirilse bile bir veya ifadesinin do\u011fru olarak de\u011ferlendirildi\u011fi ger\u00e7e\u011fini kullan\u0131r. Bu nedenle bilgisayar korsan\u0131, her zaman do\u011fru olarak de\u011ferlendiren \u201c1=1\u201d gibi ak\u0131ll\u0131 bir girdi kullan\u0131r.<\/p>\n\n\n\n<p>\u00d6rne\u011fin, e\u011fer bir emp_id s\u00fctunumuz varsa ve bilgisayar korsan\u0131 veri taban\u0131n\u0131 g\u00f6r\u00fcnt\u00fclemek istiyorsa \u201c emp_id = 112 veya 1=1\u201d gibi bir girdi kullanabilir, bu SQL sorgusunu a\u015fa\u011f\u0131daki gibi de\u011ferlendirecektir:<\/p>\n\n\n\n<p><strong>Query (Sorgu)<\/strong>:<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"630\" height=\"101\" src=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri.png\" alt=\"\" class=\"wp-image-7145\" srcset=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri.png 630w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-300x48.png 300w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-100x16.png 100w\" sizes=\"auto, (max-width: 630px) 100vw, 630px\" \/><\/figure><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">2. Sistemin her zaman True olarak de\u011ferlendirdi\u011fi \u201c=\u201d temelli SQL Injection <\/h3>\n\n\n\n<p>Bu durumda, bilgisayar korsan\u0131, = ifadesinin her iki taraf\u0131ndaki ifadenin do\u011fru olarak de\u011ferlendirilirse veri taban\u0131nda depolanan t\u00fcm sonu\u00e7lar\u0131 d\u00f6nd\u00fcrece\u011fi ger\u00e7e\u011fini ortaya koyacakt\u0131r.<\/p>\n\n\n\n<p>\u00d6rne\u011fin, bir emp_id alan\u0131m\u0131z varsa ve bilgisayar korsan\u0131 \u201c\u201d veya \u201c\u201d=\u201d girerse, bu ifade do\u011fru olarak de\u011ferlendirilir ve b\u00f6ylece t\u00fcm veri taban\u0131 verilerini bilgisayar korsan\u0131na d\u00f6nd\u00fcr\u00fcr.<\/p>\n\n\n\n<p>emp_id = \u201c\u201d veya \u201c\u201d=\u201d\u201d koyarsak, backend\u2019de otomatik olarak \u00e7al\u0131\u015fan SQL sorgusu a\u015fa\u011f\u0131daki gibidir:<\/p>\n\n\n\n<p><strong>Query (Sorgu):<\/strong><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"627\" height=\"91\" src=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-01.png\" alt=\"\" class=\"wp-image-7147\" srcset=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-01.png 627w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-01-300x44.png 300w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-01-100x15.png 100w\" sizes=\"auto, (max-width: 627px) 100vw, 627px\" \/><\/figure><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">3. Toplu SQL ifadelerine dayal\u0131 SQL Injection <\/h3>\n\n\n\n<p>Bilgisayar korsan\u0131 giri\u015f alan\u0131nda baz\u0131 SQL ifadelerini ge\u00e7erse, bu, ge\u00e7erli bir SQL ifadesi olarak kabul edilir ve veri taban\u0131n\u0131zda y\u00fcr\u00fct\u00fcl\u00fcr.<\/p>\n\n\n\n<p>\u00d6rne\u011fin, hacker, emp_id kullan\u0131c\u0131 alan\u0131na a\u015fa\u011f\u0131dakileri girerse, bu durumda, veri taban\u0131n\u0131z\u0131n konum tablosunda saklanan t\u00fcm verileri kaybedersiniz.<\/p>\n\n\n\n<p>\u201c118\u201d; TRUNCATE location<\/p>\n\n\n\n<p>Bu durumda ortaya \u00e7\u0131kan sorgu a\u015fa\u011f\u0131daki gibi olacakt\u0131r:<\/p>\n\n\n\n<p><strong>Query (Sorgu):<\/strong><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"628\" height=\"111\" src=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-02.png\" alt=\"\" class=\"wp-image-7148\" srcset=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-02.png 628w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-02-300x53.png 300w, https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-enjeksiyonu-kod-ornekleri-02-100x18.png 100w\" sizes=\"auto, (max-width: 628px) 100vw, 628px\" \/><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>SQL injections ya da SQL enjeksiyonlar\u0131, en yayg\u0131n ve temel siber sald\u0131r\u0131 t\u00fcrleri aras\u0131ndad\u0131r. Ne yaz\u0131k ki, bir SQL enjeksiyonu ayn\u0131 zamanda bir uygulaman\u0131n kar\u015f\u0131la\u015fabilece\u011fi&#8230;<\/p>\n","protected":false},"author":11,"featured_media":7142,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[48],"tags":[],"class_list":["post-7139","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-programlama"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir? - Niobe Hosting<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.niobehosting.com\/blog\/sql-injection\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir? - Niobe Hosting\" \/>\n<meta property=\"og:description\" content=\"SQL injections ya da SQL enjeksiyonlar\u0131, en yayg\u0131n ve temel siber sald\u0131r\u0131 t\u00fcrleri aras\u0131ndad\u0131r. Ne yaz\u0131k ki, bir SQL enjeksiyonu ayn\u0131 zamanda bir uygulaman\u0131n kar\u015f\u0131la\u015fabilece\u011fi...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.niobehosting.com\/blog\/sql-injection\/\" \/>\n<meta property=\"og:site_name\" content=\"Niobe Hosting\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-23T15:24:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-05-23T15:24:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-injection-nedir.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sibel Ho\u015f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sibel Ho\u015f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/\"},\"author\":{\"name\":\"Sibel Ho\u015f\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/person\\\/9edcd33ccd851c17242fa59c562c1f26\"},\"headline\":\"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir?\",\"datePublished\":\"2022-05-23T15:24:20+00:00\",\"dateModified\":\"2022-05-23T15:24:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/\"},\"wordCount\":2437,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/sql-injection-nedir.jpeg\",\"articleSection\":[\"Programlama\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/\",\"name\":\"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir? - Niobe Hosting\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/sql-injection-nedir.jpeg\",\"datePublished\":\"2022-05-23T15:24:20+00:00\",\"dateModified\":\"2022-05-23T15:24:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/sql-injection-nedir.jpeg\",\"contentUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/sql-injection-nedir.jpeg\",\"width\":720,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/sql-injection\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/\",\"name\":\"Niobe Hosting\",\"description\":\"Niobe Hosting\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#organization\",\"name\":\"Niobe Hosting\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/blog-logo.png\",\"contentUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/blog-logo.png\",\"width\":332,\"height\":49,\"caption\":\"Niobe Hosting\"},\"image\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/person\\\/9edcd33ccd851c17242fa59c562c1f26\",\"name\":\"Sibel Ho\u015f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g\",\"caption\":\"Sibel Ho\u015f\"},\"sameAs\":[\"https:\\\/\\\/www.instagram.com\\\/bismoothie\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/sibelhos\\\/\"],\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/author\\\/sibel\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir? - Niobe Hosting","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/","og_locale":"tr_TR","og_type":"article","og_title":"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir? - Niobe Hosting","og_description":"SQL injections ya da SQL enjeksiyonlar\u0131, en yayg\u0131n ve temel siber sald\u0131r\u0131 t\u00fcrleri aras\u0131ndad\u0131r. Ne yaz\u0131k ki, bir SQL enjeksiyonu ayn\u0131 zamanda bir uygulaman\u0131n kar\u015f\u0131la\u015fabilece\u011fi...","og_url":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/","og_site_name":"Niobe Hosting","article_published_time":"2022-05-23T15:24:20+00:00","article_modified_time":"2022-05-23T15:24:23+00:00","og_image":[{"width":720,"height":400,"url":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-injection-nedir.jpeg","type":"image\/jpeg"}],"author":"Sibel Ho\u015f","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Sibel Ho\u015f","Tahmini okuma s\u00fcresi":"12 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/#article","isPartOf":{"@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/"},"author":{"name":"Sibel Ho\u015f","@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/person\/9edcd33ccd851c17242fa59c562c1f26"},"headline":"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir?","datePublished":"2022-05-23T15:24:20+00:00","dateModified":"2022-05-23T15:24:23+00:00","mainEntityOfPage":{"@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/"},"wordCount":2437,"commentCount":0,"publisher":{"@id":"https:\/\/www.niobehosting.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-injection-nedir.jpeg","articleSection":["Programlama"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.niobehosting.com\/blog\/sql-injection\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/","url":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/","name":"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir? - Niobe Hosting","isPartOf":{"@id":"https:\/\/www.niobehosting.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/#primaryimage"},"image":{"@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-injection-nedir.jpeg","datePublished":"2022-05-23T15:24:20+00:00","dateModified":"2022-05-23T15:24:23+00:00","breadcrumb":{"@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.niobehosting.com\/blog\/sql-injection\/"]}]},{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/#primaryimage","url":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-injection-nedir.jpeg","contentUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/sql-injection-nedir.jpeg","width":720,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/www.niobehosting.com\/blog\/sql-injection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/www.niobehosting.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SQL Injection Nedir?\u00a0Nas\u0131l Tespit Edilir? Nas\u0131l Engellenir?"}]},{"@type":"WebSite","@id":"https:\/\/www.niobehosting.com\/blog\/#website","url":"https:\/\/www.niobehosting.com\/blog\/","name":"Niobe Hosting","description":"Niobe Hosting","publisher":{"@id":"https:\/\/www.niobehosting.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.niobehosting.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":"Organization","@id":"https:\/\/www.niobehosting.com\/blog\/#organization","name":"Niobe Hosting","url":"https:\/\/www.niobehosting.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/blog-logo.png","contentUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/blog-logo.png","width":332,"height":49,"caption":"Niobe Hosting"},"image":{"@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/person\/9edcd33ccd851c17242fa59c562c1f26","name":"Sibel Ho\u015f","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/secure.gravatar.com\/avatar\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g","caption":"Sibel Ho\u015f"},"sameAs":["https:\/\/www.instagram.com\/bismoothie\/","https:\/\/www.linkedin.com\/in\/sibelhos\/"],"url":"https:\/\/www.niobehosting.com\/blog\/author\/sibel\/"}]}},"_links":{"self":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/posts\/7139","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/comments?post=7139"}],"version-history":[{"count":0,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/posts\/7139\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/media\/7142"}],"wp:attachment":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/media?parent=7139"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/categories?post=7139"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/tags?post=7139"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}