9 comments

[ 3.4 ms ] story [ 29.6 ms ] thread
anyone know of an open source tool that approximates this? i'd love to build something like it at my company. would be used a ton.
perhaps this? http://htsql.org/
though not quite the same, anytime someone talks about SQL and URLs in the same sentence i think of htsql
The clever thing is having saved query results and a way to re-run the query. Besides that it's just a nice executable SQL pastebin with a good user auth strategy (integration into an existing system).
I just wiped their data by appending

    Robert'); DROP TABLE Students; --
To the URL!

Not really, but it makes you wonder strongly about security.

http://xkcd.com/327/

If you can make a dataclip, you have access to the database. We've audited it for privilege escalation and put some simple shooting-yourself-in-the-foot protection in, but if you REALLY REALLY want to screw yourself over you can probably find a way.