3 ms·
curl -I www.reddit.com HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: '; DROP TABLE servertypes; -- Date: Fri, 07 Dec 2012 10:3
by citricsquid 14y ago
curl -I www.reddit.com
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: '; DROP TABLE servertypes; --
Date: Fri, 07 Dec 2012 10:30:26 GMT
Connection: keep-alive
- cpsales 14y agoHaha, brilliant!
- Selfcommit 14y agoI don't get it - What am I missing?
- citricsquid 14y agoServer: '; DROP TABLE servertypes; -- It's a mysql injection. If someone was scraping headers and logging them and wasn't validating the input -- and their database was named "servertypes" -- it would delete the database.