amdo2008dragon (November 30, 1999 at 12:00 am)

Like the guy who puts on tennis shoes to avoid a bear attack -- not to outrun the bear, but to outrun the peoples hes with, taking simple steps to secure the data on your website, and, with so many vulnerable websites still on the internet, hackers will still have plenty of other easy internet pickings to feed on

amdo2008dragon (November 30, 1999 at 12:00 am)

So how do you prevent an SQL vulnerability? One way is to avoid using dynamically generated SOL in your code, which you do by using parameterized queries and stored procedures. The other way to avoid an SQL injection attack is by giving away as little information as possible when an error does occur.

amdo2008dragon (November 30, 1999 at 12:00 am)

To uncover vulnerable websites, all a hacker has to do is type the single quote into a websites' URL or data field. A vulnerable website will then respond with an SQL error message. To speed up the search for vulnerable websites, hackers can quickly search for websites open to this hack.

amdo2008dragon (November 30, 1999 at 12:00 am)

The SQL injection is easy to pull off because, where most systems separate code and data, SQL combines them, so all a hacker has to do is combine some of his own code with the data he sends to a website to gain control of it. The code usually starts with a single quote (), which, with SQL, represents the separation between code and data, and SQL assumes that whatever follows the single quote is code it needs to run.

amdo2008dragon (November 30, 1999 at 12:00 am)

According to Errata Security, the United Nations website was recently hacked using a simple SQL injection bug. And while this vulnerability might seem surprising for a site as well known as the UN, numerous sites all over the internet have proven exceedingly vulnerable to an SQL injection attack.

yajzz (November 30, 1999 at 12:00 am)

do you need a software just to do this?

biohazardx (November 30, 1999 at 12:00 am)

omg must learn how to do this . i will become god at school . and all those asians who ignore me i will finally have there numbers and info . muhahahahaha

kristinnvignisson (November 30, 1999 at 12:00 am)

wtf?!?!?!

ACTORnSCREENWRITER (November 30, 1999 at 12:00 am)

yeah you better not!

ACTORnSCREENWRITER (November 30, 1999 at 12:00 am)

they couldve made it to look like the were weathermen,or contruction guys pointing a giants antenna,but it just looks cooler when your wearing business attire, and the radar look like a sniper rifleAhh I remember the good o'l days of killing people with a black,business suit on,in 95 degree heat in Miami,Im sure I didnt stick out trying to run away from all the skimpy sexy semi nude young people,in my loud dress shoes (^_*)_Legal disclaimerDear FBI,no I DIDN'T kill anyone,just joke