How I bypassed Cloudflare's SQL Injection filter

Re:How I bypassed Cloudflare's SQL Injection filter by divbzero on Friday September 18, 2020 @07:18PM (#24522806)

Also amusing is the thought that lowercase "select" is any safer than uppercase "SELECT".

[ Parent | on HN ]

Re:How I bypassed Cloudflare's SQL Injection filter by userbinator on Friday September 18, 2020 @10:17PM (#24524294)

I can't believe anyone who has ever actually used SQL for more than a few hours would not know the keywords are case-insensitive. More likely it was just someone given a list of keywords to filter out, with no mention of case-(in)sensitivity.

[ Parent | on HN ]

Re:How I bypassed Cloudflare's SQL Injection filter by dylan604 on Friday September 18, 2020 @10:31PM (#24524382)

is case sensitivity training available through HR we can send the new recruits?

[ Parent | on HN ]

Re:How I bypassed Cloudflare's SQL Injection filter by blackflame7000 on Friday September 18, 2020 @11:39PM (#24524776)

On a case by case basis

[ Parent | on HN ]