Head Rush Ajax

321

these pages will self destruct...

Break Neck has fallen victim to a SQL injection attack, and

now all their customers are paying for it.

brain

power

What do you think happened? How could you

prevent people from getting access to all the

Break Neck customers’ names and addresses?

Welcome to SQL injection

...somehow result in this?

This doesn’t make a lot

of sense, but it sure looks

harmless. Weird... but harmless.

This sure isn’t harmless,

though... it’s every customer in

the Break Neck database!

So how did this...

Remember Joe? He’s

the JavaScript guy

at Break Neck.

322

To really understand what’s going on, you’re going to have to get into a little

SQL. Below is part of the lookupCustomer.php script that is requested b

getCustomerInfo() when a phone number is entered into the Break neck

form... we’ve highlighted the line of SQL that asks the Break Neck server for a

customer based on the phone number entered into the web form.

SQL Inspector

Your job is to take this query, and then write in the special characters that

PROJECT: CHAOS asked you to type into the Break Neck

web form. Then, you’ll know exactly what’s being sent to the Break Neck

database... and maybe even get some ideas about what’s going on.

if (!$conn)

die(“Error connecting to MySQL: “ . mysql_error());

if (!mysql_select_db(“hea ...