Please hold.  We'll be with you shortly. Or not. Go die in a fire, spambots.
You can subscribe to this discussion group using an RSS feed reader.

Cornify

Daddy's Invisible House

iFAQ

I will do bananas.

Asteroids

Youtube Videos

Deleted Posts Today (∞)

I must fortify my inner hatred for *all* people, focus it, and lash out at those who would dare and unknowingly stand in my way.

Don't mind the Chicken Littles, they panic at everything.
Except they ignore what's really dangerous.

The second cat, is a dog. I'm deeply disappointed.

Don't DROP our data

SQL injection protection gone awry.

http://worsethanfailure.com/Default.aspx
Permalink Send private email JoC 
July 6th, 2007 11:56am
That is an amusing error message.  Kinda just asking for somebody to turn off javascript and enter some evil SQL.
Permalink Send private email Clay Dowling 
July 6th, 2007 1:23pm
"Hudson Valley Federal Credit Union's online banking enrollment asks the typical security questions."

I work with bank type software/security.  This place wouldnt pass any of the federal (enron like) guidelines on security.  Oh my god.
Permalink Bot Berlin 
July 6th, 2007 2:34pm
Also, normally if you encounter any invalid characters like
"'", you are supposed to fail out, that and use prepared statements.
Permalink Bot Berlin 
July 6th, 2007 2:35pm
I thought you just used parameterized sprocs and called it a day?
Permalink Send private email JoC 
July 6th, 2007 2:38pm

This topic is archived. No further replies will be accepted.

Other topics: July, 2007 Other topics: July, 2007 Recent topics Recent topics
Powered by FruitShow and the CoT community.