Re:How not to protect against SQL injection (view source)
by _b8r0 on Wednesday March 30, 2011 @09:26AM
(#2387045)
The Computer Misuse Act 1990 makes no provision for intent (this is partially provided through the Police and Justice Act 2005 amendments). Instead, the act talks about unauthorised access, which is an undefined term.
In fact, a security consultant was convicted[1] for using ../../ in a URL after he thought a site had been hacked.
In fact, a security consultant was convicted[1] for using ../../ in a URL after he thought a site had been hacked.
[1] - http://www.out-law.com/page-6207