Do you know what is this string for 1

[greathope123]

Hi,

I have found somebody tried to do something on my ASP web site by inserting
Result: chosen nickname "abcd"; sent;
in the web address. (where "abcd" may vary, perhaps is a username)
I have found a lot similar strings in Google.
Do you know what is that and how to avoid possible harm on my site?

 

[ChrisHirst]

Sql injection, dictionary attacks etc. etc.

Avoiding harm?

Always, always, ALWAYS "sanitise" any user input before presenting it in a database query.

Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.
Webmaster Forum

 

[greathope123]

Thank you.
Sometimes he inserts that string in a querystring.
What should I do to sanitise any user input?

 

[guitarzan]

This link does a good job explaining SQL Injection as it relates to Classic ASP, and how to avoid it:

http://www.4guysfromrolla.com/webtech/061902-1.shtml

 

[greathope123]

Thanks a lot for your helps.