Re: Sql Injection and My Sql

[jim () openanswers co uk]

> Dear List,
> I would like to know if there is any tutorial which describes sql
> injection in context of My Sql. I feel that the errors returned by mysql
> when performing a sql injection are less revealing then that returned by
> other DBs.
> Thanks
> 404

While it's not DB specific, the paper "SQL Injection Attacks by Example"
by  Steve Friedl is a great introduction to this topic.

http://www.unixwiz.net/techtips/sql-injection.html

Regards,
Jim Halfpenny