|
Posted by Charlie King on 01/15/06 11:02
On Sat, 14 Jan 2006 22:11:38 +0000, in
<nmtis1hnc0nrpm4snr5o8jujpnihuul5kk@4ax.com> (alt.comp.lang.php) Geoff
Berrow <blthecat@ckdog.co.uk> wrote:
> Message-ID: <5ofis1h3k8qt3rhkd86srotmd0j96tdmnn@4ax.com> from Charlie
> King contained the following:
>
> >That limits
> >the scope for tacking on things like "AND 1=1" to the end of user
> >names.
>
> Wouldn't that be 'OR 1=1' ?
Well I did say 'things like' :)
Apologies to any would-be SQL Injection attackers that I may have led
astray with that hint.
--
Charlie
Navigation:
[Reply to this message]
|