Sunday, June 22nd, 2008
SQL Injection and separation of duties
Adrian Lane writes in his blog entry about separation of duties on the application level. While I agree with his sentiments I also know how hard it is to do so from the application development side. In most applications , database connections are using connection pooling. Creating such a separation makes the development process a [...]
No Comments » - Posted in SQL injection, security by Slavik
Friday, June 20th, 2008
Mass SQL Injection attack is still out there
Well, it was an interesting day today for us in Sentrigo. One of our customers was being attacked by this mass SQL injection and since our software identified the attack he came to us to help him cope with the situation. As explained in other places, the attack takes advantage of vulnerable web sites and [...]