3 ms·
I wouldn't associate with them either when they can't mitigate basic SQL injection: https://jet.com/search?term=%27%20OR%201*1=1*1%27 https://jet.com/search?te
by HelloThereSir 11y ago
I wouldn't associate with them either when they can't mitigate basic SQL injection:
https://jet.com/search?term=%27%20OR%201*1=1*1%27 https://jet.com/search?term=%27%20OR%201*1=1*1%27
- ctvo 11y agoOK that's hilarious.
- shoebar 11y agopretty sure this is because they use ElasticSearch and have Groovy extensions enabled. Doubtful that any website trying to reach scale would use a sql db for search.
- ladon86 11y agoHaving logical URLs for your search results isn't SQL injection: https://jet.com/search?term=Sony%20OR%20Samsung https://jet.com/search?term=Sony%20OR%20Samsung Look, it even guessed the product category based on my search term. Back in the day search engines used to have these things called logical operators, then basically Google deprecated them.
- dsugarman 11y agoexcept that they use EventStore as their main db.. [1]https://qconnewyork.com/ny2014/presentation/event-driven-services-f-and-eventstore.html https://qconnewyork.com/ny2014/presentation/event-driven-ser...
- meragrin 11y agoWouldn't https://jet.com/search?term=%27%20AND%203*1=2*1%27 https://jet.com/search?term=%27%20AND%203*1=2*1%27 be false if that were true?