News for hackers. Stuff that matters.

A comment on Password may not contain: select, insert, update, delete, drop. Parent comment

Re:Password may not contain: select, insert, update, delete,... by nicolas_t on Sunday January 21, 2024 @11:01PM (#39086046)
Bingo... I hate WAF with a passion, wasted so many hours debugging weird issues when it turned out that they were blocked by some kind of black box WAF the client put in front of their systems.
[ Parent | on HN ]
Re:Password may not contain: select, insert, update, delete,... by singingfish on Monday January 22, 2024 @02:40AM (#39087272)
Thanks,

I just implemented the subset of what we actually needed from a WAF with haproxy, and I'm delighted to say our stuff is extremely effective (as we got a nice flood attack the day after go live), and that it's 10% of the cost, and presumably 10% of the maintenance of the proprietary solution we evaluated.

[ Parent | on HN ]