Re: ISA Server and SQL Injection

[fantomas <fantomas119 () gmail com>]

Now,there are many people use SQL query to get acess in website to
find information of consumer but i find it difficult to against that.


On Wed, 16 Feb 2005 18:34:34 +0100, Bogdan Tomchuk
<bogdan.tomchuk () polytechnique fr> wrote:
> > > I'm not sure any firewall would stop a SQL Injection attack.
> > Web application firewall can do this. They filter http content.
>
> No, they cannot do it either. Problem is the same: By seeing URL you have no
> reliable way to say which parameter will be used in SQL query and how
> (with/without transformation). Only application knew it.


-- 
FA