Re: SQL Injection data retrieving??

[Jonathan Angliss <jon () netdork net>]

Hi Roland,

Monday, September 13, 2004, 1:26:47 AM, you wrote:
> ou application is vulnerable to SQL injection and I'm trying to
> build some sort of "exploit" in order to show them how simple it is
> to get data out of our database! So they might consider security
> from a other point of view...

Extracting data is just one point of an exploit... you can always
destroy the data, or modify it so it is unusable. They might be more
influenced towards a more secure setup when all their data becomes
corrupt and unusuable, or even worse, missing.

-- 
Jonathan Angliss
(jon () netdork net)

I am Drunk of Borg. Resistance is floor tile!