3 ms·
Any info on what exactly the exploit does and which databases are targeted? I'm impressed that an indiscriminate injection attack is so successful on a wide ran
by lwat 16y ago
Any info on what exactly the exploit does and which databases are targeted? I'm impressed that an indiscriminate injection attack is so successful on a wide range of websites.
- geuis 16y agoExactly. I'd like to know how to check my personal site and some of our sites at work to see if they are vulnerable or not.
- tomjen3 16y agoDo they use prepared statements? If not, they are almost certainly vulnerable.
- tomjen3 16y agoLook I am not trying to start a flamewar here, but if his code is developed without knowledge of sql injections then they are almost certainly vulnerable. It is almost impossible to fuck up prepared statements, so although they take longer to write it is a good way to secure a website.