blahblahblah.php?date=foo';DROP%20TABLE%20XXX
You're like my fairy godmother, and Santa Claus, and Q all wrapped up into one! Q from Bond, not Star Trek.
Buffy ,'Help'
Buffistechnology 3: "Press Some Buttons, See What Happens."
Got a question about technology? Ask it here. Discussion of hardware, software, TiVos, multi-region DVDs, Windows, Macs, LINUX, hand-helds, iPods, anything tech related. Better than any helpdesk!
Tom Scola - Jan 12, 2007 1:36:43 pm PST #195 of 25496
Mr. Scola’s wardrobe by Botany 500
Jon B. - Jan 12, 2007 1:38:31 pm PST #196 of 25496
A turkey in every toilet -- only in America!
Does it help that the page uses read-only access and that there's nothing in the database that I care if people see?
Tom Scola - Jan 12, 2007 1:45:12 pm PST #197 of 25496
Mr. Scola’s wardrobe by Botany 500
Does it help that the page uses read-only access and that there's nothing in the database that I care if people see?
Yeah, it helps. But avoiding that sort of thing is a good habit to get into.
Jon B. - Jan 12, 2007 3:55:05 pm PST #198 of 25496
A turkey in every toilet -- only in America!
While riding home, I think I figured out a simple way to avoid injection attacks: simply validate that the $date variable is exactly 8 numeric digits.
That should protect me, yes?
Tom Scola - Jan 12, 2007 3:56:47 pm PST #199 of 25496
Mr. Scola’s wardrobe by Botany 500
That should protect me, yes?
Yes.
Jon B. - Jan 12, 2007 4:12:36 pm PST #200 of 25496
A turkey in every toilet -- only in America!
Thanks.
Annnnndddd... I think I figured out the answer to my original question. I had ORDER BY before the WHERE. By flipping them, I'm finally getting some data! Whee!
DCJensen - Jan 13, 2007 7:59:44 am PST #201 of 25496
All is well that ends in pizza.
interesting development:
Cisco may have lost rights to iPhone trademark last year and tried to extend the trademark with the patent office by slapping a sticker on an existing product.
esse - Jan 13, 2007 8:26:21 am PST #202 of 25496
S to the A -- using they/them pronouns!
Is it worth it to upgrade the black Macbook to 2GB memory?
§ ita § - Jan 13, 2007 9:06:37 am PST #203 of 25496
Well not canonically, no, but this is transformative fiction.
Does anyone have any webcam recommendations for PCs--both laptop and desktop units, or resources for same?
tommyrot - Jan 13, 2007 9:16:42 am PST #204 of 25496
Sir, it's not an offence to let your cat eat your bacon. Okay? And we don't arrest cats, I'm very sorry.
Is it worth it to upgrade the black Macbook to 2GB memory?
Depends on what you want to run on it. Most of the time, my MacBook with 2GB has half to 2/3s of its memory unused. But when I run an XP virtual machine (via Parallels) the amount of unused memory drops quite a bit. When I run OS X, XP and Linux all at once pretty much all the memory gets used.
So I'd say that 1GB might be adequate unless you plan on running something that uses a lot of memory like Photoshop or virtual machines.
OTOH, 2GB is not too expensive so you might want to go that route anyway.