3 ms·
> If what you say about "requests" and "responses" is both true and dispositive of the issue of authorization, then you're saying that virtually every SQL injec
by meanduck 10y ago
> If what you say about "requests" and "responses" is both true and dispositive of the issue of authorization, then you're saying that virtually every SQL injection vulnerability on the Internet is also an "authorized" form of access to people's backend databases.
No GP is saying IP/TCP/HTTP does not define legality of a packet and you (not you) should not put such fragile server on Internet on first place.
Of course you can make laws to make some requests illegal. But even then you will have non-local nodes to worry about. Not to mention the change in softwares/hardwares as a result. Oh, the number brain cycles wasted.
Please fix your server its hard but not impossible.