0×000000 # The Hacker Webzine : Massive SQL Injection Attack on MS …

2) MS SQL “allows query stacking by separating the queries” which confirms the exploit. What? Is this like allowing multiple queries with a semicolon? But MySql and Postgresql do that as well, unless you use a “prepare” statment. …
blog database …
Read the original here: 0×000000 # The Hacker Webzine : Massive SQL Injection […]

RailsConf Europe 2007: Day Three

no strip_tags (you can go around and still inject some code) - use sanitize, SafeERB plugin SQL Injection - Unauthorized reading (without using [] in finds) - Needs ‘, ” or nil + line break - Conditions hash Interpreter Injection …
programming red hat security updates slaptijack softwareprogramming, red …
See the original […]