Doug Greenbaum
RSS Follow @dggreenbaumSQL Injection through HTTP Headers
One of the comments:
Cool, but it all assumes the lame way of creating SQL queries by inserting variables using string concatenation. If you have a proper SQL connector (for example Perl DBI) it supports SQL placeholders which imply handling of variable quoting by the SQL server itself, effectively preventing injections.
Response:
Interesting article, though like f055 mentioned it assumes SQL queries are done by variables through string concatenation. That does however not really imply that the universal effectiveness would be low.
About Doug Greenbaum
Posts I Like
-
never have we blown the doors off the 4th wall this much, too much, oh my g
So much work to do all month. Whew, whew whew!!!!! Then TCAF next...
-
So today I learnt...
- Mordekaiser is a huge bag of dicks (Direct Quote)
- I am awesome at landing Blitzcranks grabs
- Landing a Blitz grab on a Darius...
-
-
-
OH MY GOD
My boss just texted me asking to come into work at 4:30 in the morning and I threw my phone down and was like...
