Never ever touch a programmer

47,171 0
Summary

A clever concept demonstrates a potential SQL injection vulnerability using an unconventional input source: a car's license plate. The system involves cameras capturing license numbers, converting them to text via OCR, and then directly inserting them into a database. If a license plate were crafted to contain malicious SQL, it could exploit the database. This scenario powerfully illustrates the critical principle of never trusting user input, regardless of its origin, and the necessity of robust input validation.


This is a technical license plate block example. We don't know whether it is working or not, however, the idea is very good. When you drive through some of the junctions, the camera captures the license number and convert it into text with OCR, and then insert them into the database. Therefore, this license plate on the car becomes a SQL injection. This picture tells us -- never trust user input.

Author : 陈皓 Source : http://coolshell.cn/articles/6639.html#more-6639
SQL INJECTION PROGRAMMER

  RELATED

  COMMENTS

0

No comment for this article.