4 ms·
Thanks for the explanation. I'm still skeptical that sql could be injected though. I'm not seeing how DTMF or speech would translate to the punctuation usually
by blaines 14y ago
Thanks for the explanation. I'm still skeptical that sql could be injected though. I'm not seeing how DTMF or speech would translate to the punctuation usually required for that type of attack.
P.S. Coding with telephony APIs sounds horrible. I used to do phone system installs (Nortel, etc) - glad I don't anymore!
- patio11 14y agoI'm not seeing how DTMF or speech would translate to the punctuation usually required for that type of attack. You're letting the user specify an index for an array pointer. There may be direct memory access involved (C code shudder somebody get Thomas, that stuff scares me). This combination has been proven to get a lot of people to any input they want and a whole lot they don't.
- blaines 14y agoI get it now, thanks!