IssueRaiser

"SQL Injection" can be as simple as including an apostrophe.

"SQL Injection" can be as simple as including an apostrophe. It depends on the details. Deliberately injecting "SELECT * FROM customers" can potentially exceed authorized bounds. (Even then the intent might not be there in all cases.) Injecting "SELECT 1=1" to see if the system is broken is clearly not exceeding authorized bounds.

Posted by Dylan16807 on Feb 19, 2015, 4:44 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.8,000 issues0 comments

reliability (Other)

"SQL Injection" can be as simple as including an apostrophe.

Dylan16807Feb 19, 2015, 4:44 PM

"SQL Injection" can be as simple as including an apostrophe. It depends on the details. Deliberately injecting "SELECT * FROM customers" can potentially exceed authorized bounds. (Even then the intent might not be there in all cases.) Injecting "SELECT 1=1" to see if the system is broken is clearly not exceeding authorized bounds.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue