6 ms·

Good to know their SQL sanitization is working...

• whoisthemachine 11y ago
  At least the government contractors did their SQL correctly!
  • BinaryIdiot 11y ago
    As a former government contractor...I find this quite surprising. It's hard to find decent government contractors and even then it's usually just a few teams versus a whole company.
  • x3n0ph3n3 11y ago
    Probably not... knowing how that code gets written, the correct table was probably called "tbl_cmmts"
    • fennecfoxen 11y ago
      Meh. Needs more cynicism. Knowing the government, the data from a web form is faxed to an office where someone retypes it into an IBM AS/400 mainframe green-screen by hand, omitting the ');