Horrible SQL Injection

.ASP file

  sQuery = "SELECT * FROM MEMBER WHERE " + _    
		"Member_ID = '" + Request.Form("Member_ID") + "' AND " + _    
		"LAST_NAME  = '" + Request.Form("LAST_NAME")  + "'"

Navigational Aids
Back

This page is maintained by Foofus.
Send comments or questions to foofus@foofus.net.