|
|
Posted by Good Man on 04/13/06 23:35
"lawrence k" <lkrubner@geocities.com> wrote in
news:1144909681.379717.249460@t31g2000cwb.googlegroups.com:
> The function that returns this checks to query to see if it contains
> the words ALTER, DROP, EMPTY, GRANT, UPDATE, INSERT, and a bunch of
> others. It calls die() if it sees any of those words.
>
> For obvious reasons, I'm trepidatious about exposing the database to
> this degree. What are some of the obvious, and not so obvious, attacks
> that I shoudl expect and defend against?
a question i have as an outsider is, why are you doing this in the first
place?
as mentioned in another post, how would you possibly guard against a DOS
attack?
fundamentally poor design.
Navigation:
[Reply to this message]
|