<< Stored Procedure FUD | Home | More comment spam >>

SQL Injection used to create trigger

Jon Galloway blogs about a website hack. A clever use of SQL Injection that will really make the site owners look bad. 

Print | posted on Thursday, May 06, 2004 2:11 AM

Comments on this post

# re: SQL Injection used to create trigger

Requesting Gravatar...
That is very interesting. I wonder how long it took for them to figure out it was due to a trigger. I guess once you started a trace, it would have been easy to catch.
Left by Tara on May 06, 2004 4:06 PM

# re: SQL Injection used to create trigger

Requesting Gravatar...
I imagine it would have been a BITCH to debug. The error would totally throw you off the scent.
Left by Damian on May 06, 2004 7:37 PM
Comments have been closed on this topic.