SQL injections with noSQL databases?

Question

Hi guys,

I am using mongoDB currently, and I am wondering what measures we should take to ensure that any data that could cause problems isn't stored. I believe that normal PHP functions like mysql_escape_string isn't going to help here...

Is there SQL injections for noSQL databases and especially mongoDB?
If so, what can we do to protect us from them?

Answer 1

See MongoDB's documentation:

Generally, with MongoDB we are not building queries from strings, so traditional SQL Injection attacks are not a problem.

There are other issues to be aware of, so it's worth giving that page a read.