Hey guys
i just got this job etc
was revewing the application they build and i found that they pass SQL statements in the url itself. so i showed that that i could add something at the end of their query, aditional statements. its like this
"half of query"+"stuff from url" = query
i dont know how to but i am pretty sure that you can also insert a delete statement in the end of the query. i dont know how to do 2 statements in sql , can anyone help, please do.. i would appreciate it. I am really trying to help these guys out with security issues.
i just got this job etc
was revewing the application they build and i found that they pass SQL statements in the url itself. so i showed that that i could add something at the end of their query, aditional statements. its like this
"half of query"+"stuff from url" = query
i dont know how to but i am pretty sure that you can also insert a delete statement in the end of the query. i dont know how to do 2 statements in sql , can anyone help, please do.. i would appreciate it. I am really trying to help these guys out with security issues.