I wrote a dorm network management system based on Perl and MySQL years ago. I was pretty careful to feed all the form inputs to DBI::quote(), but apparently not careful enough. No one was cruel enough to slip in a DROP TABLE, but I did get a couple of snotty mails including bits of database rows that no one should be able to see.
no subject
I wrote a dorm network management system based on Perl and MySQL years ago. I was pretty careful to feed all the form inputs to DBI::quote(), but apparently not careful enough. No one was cruel enough to slip in a DROP TABLE, but I did get a couple of snotty mails including bits of database rows that no one should be able to see.