Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks
A newly disclosed pair of flaws in PHP’s database driver layer shows that even mature code can hide dangerous surprises. The bugs live inside PHP Data Objects (PDO), the abstraction layer web applications use to talk to databases like Firebird and PostgreSQL. Low level quirks in these drivers let...