18.Apr.2008
I rarely feel like blogging about personal stuff but today my patience finally went off. Since I switched from Finnish Nordea (which provides excellent service BTW) to a Polish one I’m having only problems. Not the only one being that for two months now they’re unable to send me a banking card for my account.
Today, however, something much more scary happened. When trying to send them email (using their own banking account messaging system) I got this nice failure:
Warning: pg_exec() [function.pg-exec]: Query failed: ERROR: syntax error at or near "u" at character 2101 in /www/pglib/libs/c_db_postgres.php on line 106 error: query(): ERROR: syntax error at or near "u" at character 2101 INSERT INTO cms.tabmail ( sto, ssubject, scontent, sheaders ) VALUES ( 'solopl@nordea.com', 'produkty i usługi bankowe', 'Temat: produkty i usługi bankowe...
As garrett pointed out – of all the places you want to see this kind of error, your bank is not one. For those unfamiliar with the problem – it’s esentially an Sql injection bug which, in short, means that your system security is a piece of shit.
Powered by Mephisto with a micro theme mod
5 Comments
Wow, indeed.
I’d get my money out of that bank immediately.
Hehe, Poland. :P
At least they’re not using mySQL ;)
Michael,
Wrong wrong wrong. Its not complete shit security, its FREE MONEY! :)
-g
‘produkty i usługi bankowe’ - that means transaction description only, thanks God not login/password. May be it’s second value system, not that bad…
Sorry, comments are closed for this article.