Difference between revisions of "Little Bobby Tables"
Karl Jones (Talk | contribs) |
Karl Jones (Talk | contribs) (→External links) |
||
Line 46: | Line 46: | ||
* [https://xkcd.com/327/ Exploits of a Mom] - "Little Bobby Tables" | * [https://xkcd.com/327/ Exploits of a Mom] - "Little Bobby Tables" | ||
* [https://en.wikipedia.org/wiki/Xkcd xkcd] | * [https://en.wikipedia.org/wiki/Xkcd xkcd] | ||
+ | * [https://www.google.com/#q=Little+Bobby+Tables Google search] |
Revision as of 04:12, 15 September 2015
Little Bobby Tables is the nickname of a character from xkcd, a webcomic by Randall Munroe.
The character represents a cautionary tale about the importance of sanitizing user inputs, in this case against SQL injection attacks.
Contents
Image
(TO DO: image.)
Dialog
School: Hi, this is your son's school. We're having some computer trouble.
Mom: Oh, dear -- Did he break something?
School: In a way. Did you really name your son Robert'); DROP TABLE Students;--?
Mom: Oh. Yes. Little Bobby Tables we call him.
School: Well, we've lost this year's student records. I hope you're happy.
Mom: And I hope you've learned to sanitize your database inputs.
Full name
Robert'); DROP TABLE Students;--?
Results of SQL statement
In the comic, the school has entered Robert'); DROP TABLE Students;--?
into the database, resulting in the deletion of all students records.
Sanitize your inputs
It's worth repeating several times: sanitize your database inputs.
More generally: sanitize all your inputs, whatever the purpose.
See also
External links
- Exploits of a Mom - "Little Bobby Tables"
- xkcd
- Google search