SQL injections coming up!!

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Sammy Who??
    Head Fluffer
    • Jan 2004
    • 305

    SQL injections coming up!!

    .....
  • Coyote
    ROTH ARMY SUPREME
    • Jan 2004
    • 8185

    #2
    In the immortal words of Fernando:

    ??
    Why settle for something you have, if it's not as good as something you're out to get?

    Originally posted by Seshmeister
    It's like putting up a YouTube of Bach and playing Chopstix on your Bontempi...

    Comment

    • Sammy Who??
      Head Fluffer
      • Jan 2004
      • 305

      #3
      after the SQL injections i'll submit hexadecimal text dumps to the server.

      Comment

      • Va Beach VH Fan
        ROTH ARMY FOUNDER
        • Dec 2003
        • 17913

        #4
        Not a very smart idea, making threats against the server...
        Eat Us And Smile - The Originals

        "I have a very belligerent enthusiasm or an enthusiastic belligerence. I’m an intellectual slut." - David Lee Roth

        "We are part of the, not just the culture, but the geography. Van Halen music goes along with like fries with the burger." - David Lee Roth

        Comment

        • Nickdfresh
          SUPER MODERATOR

          • Oct 2004
          • 49648

          #5
          Originally posted by Sammy Who??
          after the SQL injections i'll submit hexadecimal text dumps to the server.
          Is that like the sperm being injected up your ass?

          Comment

          • WARF
            DIAMOND STATUS
            • Jan 2004
            • 15347

            #6
            Good luck, parameterized statements are enforced.

            Comment

            • FORD
              ROTH ARMY MODERATOR

              • Jan 2004
              • 59949

              #7
              Eat Us And Smile

              Cenk For America 2024!!

              Justice Democrats


              "If the American people had ever known the truth about what we (the BCE) have done to this nation, we would be chased down in the streets and lynched." - Poppy Bush, 1992

              Comment

              • WARF
                DIAMOND STATUS
                • Jan 2004
                • 15347

                #8
                I'd call him a troll, but I don't have that much respect!

                Comment

                • Sammy Who??
                  Head Fluffer
                  • Jan 2004
                  • 305

                  #9
                  WARF is a jackass!

                  This site is history.

                  Comment

                  • Dr. Love
                    ROTH ARMY SUPREME
                    • Jan 2004
                    • 7833

                    #10
                    I've got the cure you're thinkin' of.

                    http://i.imgur.com/jBw4fCu.gif

                    Comment

                    • Nickdfresh
                      SUPER MODERATOR

                      • Oct 2004
                      • 49648

                      #11
                      A Googles on "Sammy Who's" IP:

                      67.159.44.51

                      67.159.44.51 - Google Search

                      And oh yeah, it is most definitely a proxy...

                      Comment

                      • hideyoursheep
                        ROTH ARMY ELITE
                        • Jan 2007
                        • 6351

                        #12
                        According to my IP, I'm Larry the Cable Guy.

                        Comment

                        • WARF
                          DIAMOND STATUS
                          • Jan 2004
                          • 15347

                          #13
                          Originally posted by Sammy Who??
                          after the SQL injections i'll submit hexadecimal text dumps to the server.
                          Ohhhhhhhh.... Jimmmm-may!

                          Comment

                          • Sammy Who??
                            Head Fluffer
                            • Jan 2004
                            • 305

                            #14
                            <%
                            ‘Format SQL Query function
                            Private Function formatSQLInput(ByVal strInputEntry)

                            ‘Remove malicious characters from links and images
                            strInputEntry = Replace(strInputEntry, “<”, “<”)
                            strInputEntry = Replace(strInputEntry, “>”, “>”)
                            strInputEntry = Replace(strInputEntry, “[”, “[”)
                            strInputEntry = Replace(strInputEntry, “]”, “]”)
                            strInputEntry = Replace(strInputEntry, “”"”, “”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “=”, “=”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “‘”, “””, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “select”, “select”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “join”, “join”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “union”, “union”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “where”, “where”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “insert”, “insert”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “delete”, “delete”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “update”, “update”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “like”, “like”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “drop”, “drop”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “create”, “create”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “modify”, “modify”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “rename”, “rename”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “alter”, “alter”, 1, -1, 1)
                            strInputEntry = Replace(strInputEntry, “cast”, “cast”, 1, -1, 1)

                            ‘Return
                            formatSQLInput = strInputEntry
                            End Function

                            Comment

                            • Nickdfresh
                              SUPER MODERATOR

                              • Oct 2004
                              • 49648

                              #15
                              Originally posted by Sammy Who??
                              <&#37;
                              ‘Format SQL Query function
                              Private Function formatSQLInput(ByVal strInputEntry)

                              ‘Remove malicious characters from links and images
                              strInputEntry = Replace(strInputEntry, “<”, “<”)
                              strInputEntry = Replace(strInputEntry, “>”, “>”)
                              strInputEntry = Replace(strInputEntry, “[”, “[”)
                              strInputEntry = Replace(strInputEntry, “]”, “]”)
                              strInputEntry = Replace(strInputEntry, “”"”, “”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “=”, “=”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “‘”, “””, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “select”, “select”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “join”, “join”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “union”, “union”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “where”, “where”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “insert”, “insert”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “delete”, “delete”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “update”, “update”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “like”, “like”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “drop”, “drop”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “create”, “create”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “modify”, “modify”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “rename”, “rename”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “alter”, “alter”, 1, -1, 1)
                              strInputEntry = Replace(strInputEntry, “cast”, “cast”, 1, -1, 1)

                              ‘Return
                              formatSQLInput = strInputEntry
                              End Function


                              Why don't you get another hot-beef "injection," knob-hardener?

                              Comment

                              Working...