Re: [HACKERS] Little note to php coders

2002-10-08 Thread Robert Treat
This is one of the reasons I usually recommend running with magic quotes on, it provides a bit of insurance for those spots where your data validation is not up to snuff. Robert Treat On Tue, 2002-10-08 at 06:11, Nigel J. Andrews wrote: > On Tue, 8 Oct 2002, Sir Mordred The Traitor wrote: > > >

Re: [HACKERS] Little note to php coders

2002-10-08 Thread Sir Mordred The Traitor
Nice. That little, cute admin :-). This is already fixed, and where is 'thanks' i wonder? I've been talking about sql injection. How about that in http://www.postgresql.org/mirrors/index.php: --- Warning: PostgreSQL query failed: ERROR: invalid INET value 'r' in /usr/local/www/www/mirrors/in

Re: [HACKERS] Little note to php coders

2002-10-08 Thread Vince Vielhaber
On Tue, 8 Oct 2002, Sir Mordred The Traitor wrote: > Check out this link, if you need something to laugh at: > http://www.postgresql.org/idocs/index.php?1' > > Keeping in mind, that there are bunch of overflows in PostgreSQL(really?), > it is > very dangerous i guess. Right? Don't see what you'r

Re: [HACKERS] Little note to php coders

2002-10-08 Thread Nigel J. Andrews
On Tue, 8 Oct 2002, Sir Mordred The Traitor wrote: > Check out this link, if you need something to laugh at: > http://www.postgresql.org/idocs/index.php?1' > > Keeping in mind, that there are bunch of overflows in PostgreSQL(really?), > it is > very dangerous i guess. Right? I'm not sure what l

[HACKERS] Little note to php coders

2002-10-08 Thread Sir Mordred The Traitor
Check out this link, if you need something to laugh at: http://www.postgresql.org/idocs/index.php?1' Keeping in mind, that there are bunch of overflows in PostgreSQL(really?), it is very dangerous i guess. Right? This let