The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

example, submitting this in a search field often returns a large number of

results, indicating that the input is being passed into an SQL query. Of course,

this does not necessarily indicate that the application is vulnerable — only that

you should probe further to identify any actual flaws.

70779c09.qxd:WileyRed  9/14/07  3:13 PM  Page 245

---

246

Chapter 9 

■

Injecting Code

Numeric Data 

When user-supplied numeric data is incorporated into an SQL query, the

application may still handle this as string data, by encapsulating it within sin-

gle quotation marks. You should, therefore, always perform the steps

described previously for string data. In most cases, however, numeric data is

passed directly to the database in numeric form and so is not placed within

single quotation marks. If none of the previous tests points towards the pres-

ence of a vulnerability, there are some other specific steps you can take in rela-

tion to numeric data.

HACK STEPS

■