I wrote a dorm network management system based on Perl and MySQL years ago. I was pretty careful to feed all the form inputs to DBI::quote(), but apparently not careful enough. No one was cruel enough to slip in a DROP TABLE, but I did get a couple of snotty mails including bits of database rows that no one should be able to see.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
zaluzianskya and ![[community profile]](https://www.dreamwidth.org/img/silk/identity/community.png)
skylark_photos
no subject
Date: 2007-10-10 04:23 pm (UTC)I wrote a dorm network management system based on Perl and MySQL years ago. I was pretty careful to feed all the form inputs to DBI::quote(), but apparently not careful enough. No one was cruel enough to slip in a DROP TABLE, but I did get a couple of snotty mails including bits of database rows that no one should be able to see.