Gail Shaw escribió:
> "Doctor John" <docjohn1 [at] gmailcom> wrote in message
> news:481623fb@news.povray.org...
>> http://blog.wired.com/monkeybites/2008/04/microsoft-datab.html
>>
> 
> From what I read, that's not the fault of any MS product, but of bad
> developers not checking their DB input. SQL injection is just as possible on
> a unix powered site with apache and oracle as iot is with IIS and SQL server
> (or IIS with MySQL, or IIS with Oracle, or apache windows woth SQL server
> ...)

Yep, it was plain old SQL injection.

http://www.computerworld.com/action/article.do?command=printArticleBasic&articleId=9080678

Post a reply to this message