[thelist] user agent spoofing security issues?

Brian Cummiskey brian at hondaswap.com
Wed Feb 7 09:00:21 CST 2007


are there security issues (sql injection specifically) involved with 
storing the user agent?  Just how far can the user agent be changed?

for example,

objRecordset.Fields("BROWSER") = 
left(trim(Request.ServerVariables("HTTP_USER_AGENT")),50)



More information about the thelist mailing list