Denver Macromedia Technology Conference March 14th - 15th, 2002 Denver, Colorado

Home     Speakers     Photos     CF Conf Central

SQL hacking

• URL and Form parameters used in SQL

  • SELECT * FROM EMP WHERE ID = #USERID#
  • Extra SQL commands on SQL Server
    http://myserver/page.cfm?ID_VAR=7%3BDELETE%20FROM%20MyCustomerTable
  • | VBA functions - shell() on Access
  • xp_cmdshell in SQL Server

Previous slide

Next slide

Back to first slide

View graphic version

Home     Speakers      Photos     CF Conf Central