Getting a lot of error 13s

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   It smells like a feeble attempt at SQL injection -- esp. the -1 and the apostrophe.
I would have expected the validNum() function to sanitize this. 

I just tried it on our infamous Ducky demo site and got an error in include-metatags.asp:
http://pc46a-wms-net.3060.wmsmerchantservices.com/store/pc/viewprd.asp?idproduct=1&idcategory=-1%27

Is this the error you're getting? Or do you not have the site set in such a way as you can see the actual error? If the latter, I can help you; if the former, then please let us know what error you are getting.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Guests Members Profile Send Private Message Find Members Posts Add to Buddy List Guest	Post Options Post Reply Quote Guests Thanks(0) Quote Reply Topic: Getting a lot of error 13s Posted: 20-October-2012 at 12:30am
	It smells like a feeble attempt at SQL injection -- esp. the -1 and the apostrophe. I would have expected the validNum() function to sanitize this. I just tried it on our infamous Ducky demo site and got an error in include-metatags.asp: http://pc46a-wms-net.3060.wmsmerchantservices.com/store/pc/viewprd.asp?idproduct=1&idcategory=-1%27 Is this the error you're getting? Or do you not have the site set in such a way as you can see the actual error? If the latter, I can help you; if the former, then please let us know what error you are getting.

Guests Members Profile Send Private Message Find Members Posts Add to Buddy List Guest	Post Options Post Reply Quote Guests Thanks(0) Quote Reply Posted: 20-October-2012 at 12:36am
	I just tried it on your site, and maybe you've either answered your question already or I'm not understanding it: /cart/pc/viewprd.asp?idproduct=7741&idcategory=-1%27