SQL injection question

From: John (clrsky00@yahoo.com)
Date: Tue Jan 20 2004 - 23:42:06 EST


Hi

i'm trying out SQL injection following David
Litchfield's papers...

All is going well, but if the Web server strip away
all the space characters in the POST data, then SQL
injection seems imposible.

i tried to use %20, \20 etc.. but it don't seems to
work

any suggestions?

c

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

---------------------------------------------------------------------------
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:46 EDT