That would be a good Google dork for finding soft targets. Combine a search for the jQuery Lock plugin and PHP extensions and fire SQL injections at all forms on it.
Or don't bother, since a lot of sites that actually buy into this sort of thing don't bother doing any server side validation. Want to be somewhat alarmed? Look up those old 'Javascript HTML encryption' scripts, and Google the sites that use them. Some of them didn't even bother to do anything more than a Javascript prompt for 'security'.
Comments
So we can safely assume anything these people build doesn't validate their inputs server side?
That would be a good Google dork for finding soft targets. Combine a search for the jQuery Lock plugin and PHP extensions and fire SQL injections at all forms on it.
Or don't bother, since a lot of sites that actually buy into this sort of thing don't bother doing any server side validation. Want to be somewhat alarmed? Look up those old 'Javascript HTML encryption' scripts, and Google the sites that use them. Some of them didn't even bother to do anything more than a Javascript prompt for 'security'.
alert("stop hacking us please");