INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Jobs

Do you know what is this string for

Do you know what is this string for

(OP)
Hi,

I have found somebody tried to do something on my ASP web site by inserting
Result: chosen nickname "abcd"; sent;
in the web address. (where "abcd" may vary, perhaps is a username)
I have found a lot similar strings in Google.
Do you know what is that and how to avoid possible harm on my site?

RE: Do you know what is this string for

Sql injection, dictionary attacks etc. etc.

Avoiding harm?

Always, always, ALWAYS "sanitise" any user input before presenting it in a database query.

Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.
Webmaster Forum

RE: Do you know what is this string for

(OP)
Thank you.
Sometimes he inserts that string in a querystring.
What should I do to sanitise any user input?

RE: Do you know what is this string for

(OP)
Thanks a lot for your helps.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Resources

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close