SQL In the Request

["bryan allott" <homegrown () bryanallott net>]

Just when i thought i had seen it all... -i come across a site which passes 
in the following as part of the REQUEST..
yes, the SWF builds a request and sends it through to a php server... in 
plain text.

POST /flashsql.php?id=106 HTTP/1.1

= QUERYSTRING ====
id=106

= BODY ====
host=dedi119b.your-server.co.za
sql_=SELECT DISTINCT(movies.id), movies.name, filename FROM movies LEFT 
JOIN groups_movies ON (movies.id = groups_movies.movie_id) LEFT JOIN groups 
ON (groups.id = groups_movies.group_id) LEFT JOIN files_groups ON (groups.id 
= files_groups.group_id) LEFT JOIN files ON (files.id = 
files_groups.file_id) WHERE movies.id IN(155,150,52,149,134,133,76) AND 
files.file_type_id=9 ORDER BY movies.id
dat=sk_cms

is there anyway that this can be "acceptable" ? 


-------------------------------------------------------------------------
Sponsored by: Watchfire

Watchfire has new programs available for pen testers and consultants to 
use AppScan in client engagements. AppScan is the leading Web application 
assessment tool. Want to see it for yourself? Take a look today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=701500000008YSz
--------------------------------------------------------------------------