News for hackers. Stuff that matters.
Re:A Big Case of Oops by tptacek on Friday February 26, 2010 @02:27PM (#1153906)
Sure. It depends on the database, the way the query is constructed, and the way the handle is initialized. But the bigger problem is what the web stack does to the query before it hits the database.

People have been playing charset games to get past SQL quoting for almost 10 years now, and not just in PHP.

There are no comments on this comment yet.