Postgres Pro
Downloads
Home   >   mailing lists

Little Bobby Tables visits MySQL.com - Mailing list pgsql-advocacy

From Joshua Berkus
Subject Little Bobby Tables visits MySQL.com
Date
Msg-id 986787416.35174.1301330440379.JavaMail.root@mail-1.01.com
Whole thread Raw
Responses Re: Little Bobby Tables visits MySQL.com  (Adrian Klaver <adrian.klaver@gmail.com>)
List pgsql-advocacy
Tree view 
All,

Apparently Oracle didn't see fit to activate MySQL's own anti-SQL-injection features on their own site:

http://blog.sucuri.net/2011/03/mysql-com-compromised.html

(wanna bet the site is running 4.1 or something?)

Let that be a lesson to you: sanitize your SQL inputs!

--
Josh Berkus
PostgreSQL Experts Inc.
http://pgexperts.com
San Francisco

--
Josh Berkus
PostgreSQL Experts Inc.
http://pgexperts.com
San Francisco

pgsql-advocacy by date:

Previous
From: Korry Douglas
Date:
Subject: Re: Reddit's latest failure & PG
Next
From: Adrian Klaver
Date:
Subject: Re: Little Bobby Tables visits MySQL.com