code-projects Online Product Reservation System 1.0 register_code.php SQL Injection Vulnerability (CVE-2026-0592)

// Vulnerable Code Example:
// $username = $_POST['username'];
// $conn->query("INSERT INTO users (username) VALUES ('$username')");

// Secure Remediation using PDO Prepared Statements:
try {
    $pdo = new PDO('mysql:host=localhost;dbname=reservation_db;charset=utf8', 'db_user', 'db_password');
    $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

    $stmt = $pdo->prepare('INSERT INTO users (fname, lname, address, city, province, country, zip, tel_no, email, username) VALUES (:fname, :lname, :address, :city, :province, :country, :zip, :tel_no, :email, :username)');
    
    $stmt->execute([
        'fname' => $_POST['fname'],
        'lname' => $_POST['lname'],
        'address' => $_POST['address'],
        'city' => $_POST['city'],
        'province' => $_POST['province'],
        'country' => $_POST['country'],
        'zip' => $_POST['zip'],
        'tel_no' => $_POST['tel_no'],
        'email' => filter_var($_POST['email'], FILTER_VALIDATE_EMAIL),
        'username' => $_POST['username']
    ]);
} catch (PDOException $e) {
    error_log($e->getMessage());
    exit('Database error occurred.');
}

# Nginx configuration to restrict access to the registration handler
location /handgunner-administrator/register_code.php {
    allow 10.0.0.0/8; # Restrict to internal trusted network
    deny all;
}

#!/bin/bash
LOG_FILE='/var/log/apache2/access.log'
TARGET_URI='/handgunner-administrator/register_code.php'

echo '[+] Auditing logs for SQL Injection attempts...'
grep -i "$TARGET_URI" "$LOG_FILE" | grep -E "(UNION|SELECT|INSERT|UPDATE|--|#|%27|%22|INFORMATION_SCHEMA)" > /tmp/detected_attacks.log

if [ -s /tmp/detected_attacks.log ]; then
    echo '[ALERT] Potential SQL Injection indicators found!'
    cat /tmp/detected_attacks.log
else
    echo '[INFO] No malicious patterns detected in the logs.'
fi