| 01:05.28 | Tenebram | I'm here. |
| 01:05.55 | Maquis | were you here this morning when i posted my question about BYU and security on we bapps? |
| 01:06.06 | Tenebram | Well, I was logged in, but not at my computer. |
| 01:06.16 | Maquis | did you read it? |
| 01:06.21 | Tenebram | Yep, I sure did. |
| 01:06.50 | Maquis | so.. |
| 01:06.52 | Tenebram | And yeah, that is normally bad practice. |
| 01:06.54 | Maquis | umm.... |
| 01:07.21 | Maquis | since i have that information, and it includes the names of all the columns used, what (hypothetically) could i do with it... |
| 01:07.30 | Maquis | since i don't understand all this stuff... |
| 01:07.42 | Maquis | i want to learn how to hack, solely for the purpose of knowing... |
| 01:07.56 | Maquis | i don't actually want to use it... it just seems like useful stuff to know... |
| 01:08.02 | Tenebram | Not sure, depends on what's there, and how you can trick the cgi/php/whatever into executing your SQL statements. |
| 01:08.23 | Maquis | the entire SQL statement... |
| 01:08.28 | Maquis | and they don't use select *... |
| 01:08.50 | Tenebram | You can get it to execute arbitrary SQL statements? |
| 01:09.00 | Maquis | huh? |
| 01:09.02 | Tenebram | That would be a nasty little security hole. |
| 01:09.07 | Maquis | i don't know... |
| 01:09.19 | Maquis | it displayed the entire sql statement for me as an error... |
| 01:09.45 | Maquis | it's a "can't execute" error, that happens to display the sql string instead of just saying that there is an error... |
| 01:10.00 | Tenebram | That's not too bad of an error, it doesn't actually let you change the statement executed. |
| 01:10.26 | Tenebram | Just knowing those things doesn't really open any holes. |
| 01:10.33 | Maquis | no... but i read someplace that it's bad for security... |
| 01:10.39 | *** join/#utah spr (~spr@67.50.43.69) |
| 01:10.42 | Maquis | because they know the table names, and the column names and such.. |
| 01:11.09 | Tenebram | Well, yeah, it can make things easier, but it's not a hole in and of itself. |
| 01:11.10 | Maquis | i also heard that anything that gives the full path to a script is bad... |
| 01:11.16 | Maquis | and this does that too... |
| 01:11.31 | Maquis | but i don't really know why it's that bad... |
| 01:11.33 | Tenebram | It would make it easier to exploit a seperate security hole though. |
| 01:11.51 | Maquis | hmmm... |
| 01:11.52 | Maquis | :) |
| 01:12.38 | Maquis | that's a mighty long select statement, given that it doesn't have anything but select, from and where... |
| 01:12.41 | Maquis | no joins or anything... |
| 01:12.48 | Maquis | it's just a really long list of columns... |
| 01:13.31 | Tenebram | Either way, that's a really messy way to fail. |
| 01:13.38 | Maquis | yeah... |
| 01:13.42 | Maquis | agreed.. |
| 01:14.07 | Tenebram | So, I see you've become sucked into the void that is IRC. |
| 01:14.26 | Maquis | i admit that the CESA webpage probably has SQL fails about the same level, but that's cuz it's still in creation... (even though it is currently deployed...) |
| 01:14.33 | Maquis | not too bad... |
| 01:14.48 | Maquis | usually don't say much unless i have a problem with my comp... |