8

I was writing an answer to a question in Stack Overflow and it involved writing drop table, and remove table commands. I noticed I kept getting an error on submit, after a little trial and error I noticed these two lines of code were problematic.

DROP TABLE contacts

and

RENAME TABLE contactstemp TO contacts

I couldn't figure out a way to submit it. Eventually I used Mozilla Firefox and copy and pasted my answer there, and it worked fine.

Is this a known issue?

ED: Of course, this submits just fine via Chrome. So, I'm baffled.

8
  • 4
    You have an overzealous firewall or router on your network. Commented May 14, 2014 at 14:57
  • How does that work?
    – kevingreen
    Commented May 14, 2014 at 14:58
  • 7
    Your network router or firewall is trying to 'prevent' a SQL injection attack by aborting any connection that has the text 'DROP TABLE' in it. Commented May 14, 2014 at 14:58
  • Work-around: Use SSL. Commented May 14, 2014 at 14:59
  • I'm betting overzealous Chrome add on. We're not doing any deep packet inspection here.
    – kevingreen
    Commented May 14, 2014 at 14:59
  • Disable all the plugins in Chrome and try... Commented May 14, 2014 at 15:04
  • 1
    Disabled all plugins still didn't work. I sniffed the connection using Wireshark and it never leaves our network. Martijn Pieters answer is correct. I love learning new things, even small stuff.
    – kevingreen
    Commented May 14, 2014 at 15:10
  • How does one NOT use SSL with Stackoverflow? Leading to the further question: how can the firewalling device know what's in the submission? Is this an extreme proxy?
    – holdenweb
    Commented Aug 27, 2017 at 10:08

1 Answer 1

16

You have an overzealous firewall or router operating on your network that is trying to prevent SQL injection attacks. It is aborting the connection because you used a naughty word. Cisco's Intrusion Prevention System does this, for example.

The work-around is to post over SSL instead; although SSL isn't officially supported yet, it does work just fine when posting an answer.

If this worked in Firefox, you probably have HTTPS-Everywhere installed and unwittingly used posted over HTTPS already when you switched to that browser.

6
  • How does that effect Chrome, but not Firefox ?
    – kevingreen
    Commented May 14, 2014 at 15:02
  • @kevingreen: Have you got HTTPS-everywhere running in Firefox? Commented May 14, 2014 at 15:03
  • I do have HTTPS everywhere! Thanks for the reminder!
    – kevingreen
    Commented May 14, 2014 at 15:07
  • 2
    I wire sharked the connection, and it's definitely not leaving our network.
    – kevingreen
    Commented May 14, 2014 at 15:08
  • 2
    You know, this answer is probably a good fit for Super User or Server Fault.
    – user456814
    Commented May 14, 2014 at 21:05
  • 1
    @Cupcake: have a question in mind? Commented May 14, 2014 at 21:07

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .