Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: SQL injection (no single quotes used) |
|---|---|
| Date: | Wed, 15 Dec 2004 10:50:02 -0600 (CST) |
on my! you are right, this won't work with ADO for example, my bad :( Thanks and sorry for sending a not so tested POC to all of you. -JC --- "Olivier G. Gaumond" <olig@monimap.com> escribió:
Juan Carlos Calderon wrote:Here the MS Documentation for GO Keyword: <snip> SQL Server utilities interpret GO as a signal that they should send the current batch of Transact-SQL statements to SQL Server. The current batch of statements is composed of all statements enteredsincethe last GO, or since the start of the ad hocsessionor script if this is the first GO </snip>This may work in SQL Server utilities such as Query Analyzer, but the GO keyword is not part of the T-SQL language, so this would not work in a query sent by ADO. At least it doesn't work with the ADO.NET SqlClient provider. Olivier
ATTACHMENT part 2 application/x-pkcs7-signature
name=smime.p7s _________________________________________________________ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | OWASP Testing Project, Phase One Release, OWASP Testing Project |
|---|---|
| Next by Date: | Cookies sent to different ports?, CFW |
| Previous by Thread: | Re: SQL injection (no single quotes used), Olivier G. Gaumond |
| Next by Thread: | RE: SQL injection (no single quotes used), Brett Moore |
| Indexes: | [Date] [Thread] [Top] [All Lists] |