3 ms·
Breaks as in "SQL injection is possible" or breaks as in "invalid number of parameters"?
by sarciszewski 12y ago
Breaks as in "SQL injection is possible" or breaks as in "invalid number of parameters"?
- OMGWTF 12y agoIf the list contains 2 elements, it will overwrite the second parameter, so the total number of arguments is still the same.
- laumars 12y agoAh yes, but that's a slightly different feature to the one demonstrated by the author (https://www.youtube.com/watch?feature=player_detailpage&v=gweDBQ-9LuQ#t=1012 https://www.youtube.com/watch?feature=player_detailpage&v=gw...). However that's not to say that the vulnerability you raised isn't also a serious one developers need to be mindful of.