Other News

Community

SQL Injection (Sample Chapter)

(Ilia Alshanetsky) SQL injection is yet another common vulnerability that is the result of lax input validation. Unlike cross-site scripting vulnerabilities that are ultimately directed at your site’s visitors, SQL injection is an attack on the site itself—in particular its database. (pdf)

Community

What Will Make XML Usable?

XML-based specifications are proliferating in every industry. While we understand the motivation for this, the proliferation is tantamount to proprietary. Even though the specifications are defined in XML, they use different element names, attributes, and data structures, and there is little hope th