6 ms·
Reddit.com's response headers: Cache-Control: no-cache Connection: keep-alive Content-Encoding: gzip Content-Length: 18170 Content-Type: te
by dangrossman 15y ago
Reddit.com's response headers:
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 18170
Content-Type: text/html; charset=UTF-8
Date: Wed, 04 Apr 2012 04:50:39 GMT
Pragma: no-cache
Server: '; DROP TABLE servertypes; --
Vary: Accept-Encoding
- jedberg 15y agoI put that in as a joke years ago. I can't believe it's still there.
- masklinn 15y agoI'm sure somebody somewhere is actually using that to clean up a table in some sort of wonky proxy setup and will cry foul if that header is ever removed.
- banthar 15y agoI've tried to write a program (https://gist.github.com/392445 https://gist.github.com/392445) which would be affected by this. It seems it should be `'); DROP TABLE servertypes; --` to actually drop any tables. All I was able to get now is syntax error.
- dangrossman 15y agoThis is a valid syntax for MySQL: INSERT INTO servertypes SET server = 'Apache'
- mkopinsky 15y agoI recently learned about the INSERT SET syntax, and have started to use it across the board. Sooooo much more readable when column names and values are next to each other rather than separated. </offtopic>
- dave1010uk 15y agoI had the same idea: https://gist.github.com/913402 https://gist.github.com/913402
- dangrossman 15y agoThat's not a valid syntax for INSERT in MySQL. When you use the VALUE or VALUES keyword, it must be followed by a set of parentheses.