code-projects Online Product Reservation System 1.0 register_code.php SQL 인젝션 취약점 (CVE-2026-0592)

// 안전하지 않은 기존 코드 예시 (SQL Injection에 취약)
// $username = $_POST['username'];
// $query = "INSERT INTO users (username) VALUES ('$username')";
// mysqli_query($conn, $query);

// PDO를 사용한 안전한 매개변수화된 쿼리 적용 예시
try {
    $pdo = new PDO('mysql:host=localhost;dbname=reservation_db;charset=utf8', 'db_user', 'db_password');
    $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

    $stmt = $pdo->prepare('INSERT INTO users (fname, lname, address, city, province, country, zip, tel_no, email, username) VALUES (:fname, :lname, :address, :city, :province, :country, :zip, :tel_no, :email, :username)');
    
    $stmt->execute([
        'fname' => $_POST['fname'],
        'lname' => $_POST['lname'],
        'address' => $_POST['address'],
        'city' => $_POST['city'],
        'province' => $_POST['province'],
        'country' => $_POST['country'],
        'zip' => $_POST['zip'],
        'tel_no' => $_POST['tel_no'],
        'email' => filter_var($_POST['email'], FILTER_VALIDATE_EMAIL),
        'username' => $_POST['username']
    ]);
} catch (PDOException $e) {
    error_log($e->getMessage());
    exit('An error occurred.');
}

# Nginx 설정 파일에 추가하여 외부로부터의 직접적인 접근 차단 (신뢰할 수 있는 IP만 허용)
location /handgunner-administrator/register_code.php {
    allow 192.168.1.0/24; # 관리자 대역 IP 예시
    deny all;
}

#!/bin/bash
LOG_FILE='/var/log/nginx/access.log'
TARGET_URI='/handgunner-administrator/register_code.php'

echo '[+] Scanning for potential SQL Injection attempts on register_code.php...'
grep -i "$TARGET_URI" "$LOG_FILE" | grep -E "(UNION|SELECT|INSERT|UPDATE|DELETE|--|#|%27|%22)" > /tmp/sqli_detected.log

if [ -s /tmp/sqli_detected.log ]; then
    echo '[WARNING] Potential SQL Injection attempts detected!'
    cat /tmp/sqli_detected.log
else
    echo '[INFO] No obvious SQL Injection patterns found in logs.'
fi