Re:HTTP Headers For Fun & Profit
by cpsales on Friday December 07, 2012 @07:02AM
(#4886563)
Haha, brilliant!
[ Parent
| on HN ]
Re:HTTP Headers For Fun & Profit
by Selfcommit on Friday December 07, 2012 @10:14AM
(#4887210)
I don't get it - What am I missing?
Re:HTTP Headers For Fun & Profit
by citricsquid on Friday December 07, 2012 @10:29AM
(#4887282)
Server: '; DROP TABLE servertypes; --
It's a mysql injection. If someone was scraping headers and logging them and wasn't validating the input -- and their database was named "servertypes" -- it would delete the database.