SQL injection

[pinguin123]

Hi,

I made this portal more secure.

Can anyone try to login with SQL-injection - I want to know if my work was good.

[Link Removed] -- Goatboy

greets, Markus

[Goatboy]

Before we can test it, you need to prove that it is in fact your website. Post an HTML comment on the page saying "HackThisSite" and then link us to that page.

[pinguin123]

Ok, I added a GET-Parameter for proofing - I can't add it so source because houndrets of people view this site daily.

But try this - http://heliothermsupport.com/Login.aspx ... fault.aspx

[msbachman]

Ok, I added a GET-Parameter for proofing

That's still done on the client.

Goatboy's asking for some proof that it's your site. It is, right? If so it shouldn't be too hard to provide proof of it. Doesn't even need to be HTS stuff. Put up a comment with your username maybe.

It won't be viewable to the public; i'd be shocked if you were contacted in doing so by some concerned citizen.

[pinguin123]

ok, but I added the GET Parameter - it will show it in title-tag.

Ok, I will add a html comment now - for 1 hour - is it enough?

[Goatboy]

The smart thing would have been to leave it up until someone came by to confirm it. Just add a comment saying "GBIAFB" and wait until we say it's okay. I figure a random string of characters won't cause much alarm if anyone does see it.

[centip3de]

The smart thing would have been to leave it up until someone came by to confirm it. Just add a comment saying "GBIAFB" and wait until we say it's okay. I figure a random string of characters won't cause much alarm if anyone does see it.

I highly doubt that is a random string of characters.... I think it means:

"Goat Boy Is A Fucking Beast"

Please excuse my French.

[Monica]

...Necroing a thread makes me very upset.

[sanddbox]

And yet you don't lock it? Locked.

[Goatboy]

And yet you don't lock it? Locked.

And you didn't move it to the Graveyard. Fail. Also, 10 days is hardly a necro. And yes, GBIAFB is what you think it is.