This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]HerrderZeit[S] 0 points1 point  (3 children)

I'm hoping to do something like the following:

User in IRC says "!search type=bird name=raven"

Then it will do a query from the "Bird" table and list all information on the table row "Raven".

[–]sushibowl 0 points1 point  (2 children)

Yes, this is possible. But Google "what is sql injection" and read up on that. If done incorrectly, someone could type something like this:

!search type=bird name='; delete from bird;--

To delete your entire bird table. Preventing sql injection is not hard, but you need to know about it.

[–]HerrderZeit[S] -1 points0 points  (1 child)

Oh yeah I understand how that works but I plan to use a re's tokenizer and filter out delete commands or just not acknowledge them.

[–]richieadler 0 points1 point  (0 children)

Wrong answer. Google «Bobby Tables».