Learn More
Resend Email
2
gitpush
4y

I signed up to a website, and my password contained & symbol, got an error that password cannot contain that symbol, I thought we are way beyond vulnerability of SQL injection?

Or that symbol can be used for some other attacks?

random

why tho?
Favorite
Ranter
Comments
  • 3
    4y
    Maybe database charset?

    Edit: To clarify, I mean something like latin-1 vs utf8
  • 0
    4y
    @AvyChanna aah good point, thanks for bringing this up 😊
  • 4
    4y
    I hope that's not the reason, that would imply they're saving the password in plain text.
  • 1
    4y
    @gitpush @TheHatBandit That was just a blind shot. For context, I once used MySql without changing default charset, (latin-1), and later got to know I could not use any other language than english for input(or unicode)
  • 2
    4y
    Oh, if you think the majority of websites out there have proper pentesting run on them you are in for a big surprise
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment