2

I tried to leave this comment on a question about SQL injection (but with straight quotes instead of curly ones) and got the big red error box.

Get rid of the last ' so your password looks like this: 'foo' or '1'='1'

Looking at the transaction in the browser inspector, I got no response at all. A packet trace in Wireshark showed the server sending nothing but a TCP RST packet in response to my POST. Is this maybe some kind of malware protection on the web server?

It wouldn't let me submit the comment until I added some space around the = at the end:

Get rid of the last ' so your password looks like this: 'foo' or '1' = '1'

Edit: I couldn't submit this question without making those changes to the quotes either!

5
  • Get rid of the last ' so your password looks like this: foo' or '1'='1 Jan 13, 2017 at 5:36
  • Well, I didn't have any trouble submitting the comment or question. Are you sure you're not mixing up backticks and straight quotes? Jan 13, 2017 at 5:37
  • Certainly not. I've left a few thousand comments, I know how it works ;) Just tried editing my question and am unable to with your changes. At least I have a packet trace to prove I'm not crazy.
    – miken32
    Jan 13, 2017 at 5:41
  • That is very odd. I cannot imagine that the system would treat a 10k+ user any different here than a 100k+ user. Jan 13, 2017 at 6:01
  • Agreed; this seems like it is at the web server level, not anything that should be able to differentiate between users
    – miken32
    Jan 13, 2017 at 6:02

1 Answer 1

5

This is most likely your local network. Apparently there are firewalls which make a habit of blocking outbound requests that they think are malicious in some way. I've found nothing in our logs to suggest you're being blocked, and your symptoms match previous reports of this problem from others.

For a longer discussion of this problem, see: Asking an SQL Question Appears to Cause Internet Connection Loss

1
  • Interesting. Just a standard Asus router here, but I'm in university housing so might be something upstream. Definitely makes sense.
    – miken32
    Jan 13, 2017 at 6:15

Not the answer you're looking for? Browse other questions tagged .