Skip to content

Comment on Rumpetroll - a new Websockets/HTML5/CSS3/JS experiment

Comments

I broke it. I was the "DROP TABLES" guy, and you'll want to sanitize the text before it goes into the db.

I typed

     "; DROP TABLE `users`;
Which made every person stop moving, and then on page reload nothing happens. (So the `users` table is dropped.)

Sorry!! I didn't mean to break it, I wanted to test it.

Ha. Nice try. We don't have any table called users :)

..but if anyone knows why it sometimes freeze, please let us know. We were not excepting this kind of traffic.

Hmm, I assumed that I broke it because of two tries (with page reloads between) and it froze/broke after.

EDIT: Alright, it works. But, as before it won't show the text of my input (when it's an attempted SQL injection). Are you trying to hide it or not? (e.g. if someone types "Hello, World" (with quotes) they will want those to appear.)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.