Page 1 of 1

Client Side Web Server "Protection"

Posted: Tue Mar 29, 2011 4:20 pm
by dhouwn
http://www.cadw.wales.gov.uk/
Check the source code.

Re: Client Side Web Server "Protection"

Posted: Tue Mar 29, 2011 8:50 pm
by GµårÐïåñ
I did a very quick look, not sure what you meant and I didn't see anything special but then again I will admit, I did a quick look and other than the CSS and some validation SCRIPT which was built-in, not seeing anything in the source code. Just wanted you to know that I looked at least but not sure I see what you mean exactly :(

Re: Client Side Web Server "Protection"

Posted: Wed Mar 30, 2011 12:35 pm
by dhouwn
This:

Code: Select all

var IllegalChars=new Array("select", "drop", ";", "--", "insert", "delete", "xp_", "update", "/", ":", "char(", "?", "`", "|", "declare", "convert", "cast(", "@@", "varchar", "2D2D", "4040", "00400040", "[", "]");
:lol:

Re: Client Side Web Server "Protection"

Posted: Wed Mar 30, 2011 9:27 pm
by GµårÐïåñ
Ok, I get it :| its a joke or just asinine as "protection" hence the quotations I suppose :?

Re: Client Side Web Server "Protection"

Posted: Wed Mar 30, 2011 10:09 pm
by Giorgio Maone
JS vs SQLI LOL :)

Re: Client Side Web Server "Protection"

Posted: Wed Mar 30, 2011 10:24 pm
by GµårÐïåñ
Giorgio Maone wrote:JS vs SQLI LOL :)
Yeah I figured that, thanks for rubbing it in ;)
I should have known given this guys goes ape shit for it (http://www.immortaltechnique.co.uk/Thre ... I-Tutorial)