When I was younger and more naive, I had the idea of logging visits to my website into an SQL database. Naturally, these queries were built with concatenation and executed with mysql_query, and then printed directly to my sweet admin interface.
I eventually realised it was stupid, and ever since I’ve been wondering how many websites would break if i changed my useragent to '; DROP TABLE visits; -- <!--.
Awesome!
Looks like it’s been fixed. This one still works:
http://mxtoolbox.com/SuperTool.aspx?action=txt:jamiehankins.co.uk&run=toolpage
When I was younger and more naive, I had the idea of logging visits to my website into an SQL database. Naturally, these queries were built with concatenation and executed with
mysql_query, and then printed directly to my sweet admin interface.I eventually realised it was stupid, and ever since I’ve been wondering how many websites would break if i changed my useragent to
'; DROP TABLE visits; -- <!--.That’s just classic.