4 ms·
Reddit.com is doing SQLi in its Server HTTP header
- jdiez17 14y agoIt's a joke.
- sid6376 14y agoOld discussion regarding the same: http://news.ycombinator.com/item?id=1352858 http://news.ycombinator.com/item?id=1352858
- spiffistan 14y agohttp://xkcd.com/327/ http://xkcd.com/327/
- h2s 14y agoAn enormous screenshot of a browser window with the Network tab open in the bottom is hardly a sensible way of communicating the content of a few bytes of HTTP header. $ curl -I "http://www.reddit.com/" HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: '; DROP TABLE servertypes; -- Date: Sun, 03 Feb 2013 13:35:50 GMT Connection: keep-alive
- FiloSottile 14y agoA link to a pastebin (the only alternative that comes to my mind) would have required more verification effort, I guessed.