Comment on Security researcher Charlie Miller booted from Apple Developer ProgramparentComments−rmc14yYou don't need to "take over someone's site" to prove that their site has a SQLI vector, just put in a little string somewhere.−mike-cardwell14yIn the UK, using SQL injection to "put a little string somewhere" would be illegal.−rmc14yOh probably. But I'm pointing out that you can demonstrate a SQLI attack without having to completly take down someone's site.
Comments
You don't need to "take over someone's site" to prove that their site has a SQLI vector, just put in a little string somewhere.
In the UK, using SQL injection to "put a little string somewhere" would be illegal.
Oh probably. But I'm pointing out that you can demonstrate a SQLI attack without having to completly take down someone's site.