Comment Spam of the Day Award
By AndrewBoyd • Sep 6th, 2007 • Category: Australian Odd…goes to this guy - this is what he put in as his comment author name:
Author : stevee’) UNION SELECT 1 UNION ALL SELECT user_pass FROM wp_users WHERE ID=1 AND IF(ORD(SUBSTRING(user_pass,10,1))>50,BENCHMARK(1200000,MD5(1337)),3)/*
The sad thing is, he’s not that good a coder - that said, if anyone out there is using a default wp_ prefix for their WordPress database tables, it might be worth thinking about the implications of this kind of comment-based attack.
AndrewBoyd is a consultant by day and blogger by night. He loves good food, good wine, and discussing faceted classification schemes with friends.
Email this author | All posts by AndrewBoyd
