martes, abril 08, 2008

Exploits of a Mom (Little Bobby Tables)

Her daughter is named Help I'm trapped in a driver's license factory.

Little Bobby Tables What Shall We Name the Baby—SQL Injection Edition.

Hi, this is your son's school.
We're having some computer trouble.

Oh, Dear - Did he break something?
In a way -

Did you really name your son Robert'); DROP TABLE Students; -- ?

OH, Yes. Little bobby tables, we call him.

Well, we've lost this year's student records.
I hope you're happy.

and I hope you've learned to sanitize your database inputs

Via: xkcd.com