"[1 = 1]" gets an Internal Server error. The PHP is probably trying
to cough up everything....
On Sun, Dec 12, 2010 at 11:44 AM, Jeffrey Walton <noloa...@gmail.com> wrote:
> BTW, Since the web interface tried to interpret my input ("Invalid
> regular expression search string"), this database is probably
> vulnerable to a SQL injection.
>
> GNU just got pwn'd
>
> Has anyone tried thew 1 =1 trick lately? Are passwords residing in
> another table?
>
> Jeff
>
> Am 12.12.2010 12:29, schrieb Jeffrey Walton:
>> Hi Guys,
>>
>> The executable name is suspicious at best. Attempting to search
>
> On the contrary, it's a standard utility mentioned in IEEE Std 1003.1.
>
>> http://cygwin.com/packages/ results in an error "Invalid regular
>> expression search string: `[.exe`". Quotes, double quotes, and back
>> ticks do not help during the search.
>
> Problem of the web interface.
>
>> What is this program supposed to do?
>
> The same as "test", except that "[" will expect and consume the closing
> bracket.
> Used in scripting with shells that don't have [ built-in.
>
> Details with "man test" ("man [" is missing on my Cygwin system), or in bash
> with "help [".
>
> --
> Matthias Andree
>
> --
> Problem reports: http://cygwin.com/problems.html
> FAQ: http://cygwin.com/faq/
> Documentation: http://cygwin.com/docs.html
> Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
>
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
