Comments by Rohan Rajpoot (Top 2 by date)

Rohan Rajpoot 26-Mar-14 3:55am View

Thanks for your reply.

I think I must describe the whole schenario:

First of all its a legacy application. What they have done to prevent SQL injection is: they have created a function which will check in the querystring and cookies, a certain set of keywords like table,sys,drop,@ etc..

This function is called in loading of every page. If it found those keywords in the text, the user is redirected to an error page and an error log is written that SQL injection detected on this page.

I am into support of this project. And I have to fix this issue.

Rohan Rajpoot 26-Mar-14 2:48am View

Issue that we have implemented a functionality to detect sql injection in the sub domain. Now the cookies from the parent domain is coming which are creating sql injection.