The problem is that you may also erase the entire database of the server you're ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

chimeracoder on April 25, 2012 | parent | context | favorite | on: How I Collect Passwords

The problem is that you may also erase the entire database of the server you're trying to log into: http://xkcd.com/327/

I guess that's one way of protecting your accounts from being hacked, though... you can't hack an account that no longer exists!

VikingCoder on April 25, 2012 [–]

Think about it -

do you really want to use a site... that's vulnerable to SQL injection attacks?

If my password erases their DB, then I didn't want my password on their DB in the first place!

chris_wot on April 26, 2012 | [–]

That's assuming they have a database table called "Password". I'd use:

'); DROP DATABASE;

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact