Search engine to SPAM redirect error

[STA]

Re: Search engine to SPAM redirect error

@firenze

Girtay hain Shah Sawar hi Maidan-e-Jung main

In 2005 i was hired at a government dept. for one reason their website was being hacked every other hour, they restore database it hacked again .. and so it continues.
the site was based on ASP/MSSQL… the problem was with login area the so-called hackers automated system able to access the database with script exploit techniques. some idiot design the login/registration area without any validation against query-string and was using sql string concatenation queries.

i spent two weeks on that crap in the end it was two lines of code to fix the problem

SQL injection is most easiest way to hack website. Therefore, I always support the idea of stored procedure instead of inline sql in data layer.