Why you should never trust client computers when building web apps

[giza]

This is a short and informative video that shows just how easy it is to take advantage of a web application where security was not given much thought:

Watch on YouTube

If you're writing web apps and not sanitizing your input, then this may have happened to you already. You're logging all accesses, right? Right?

Comments

[giza.livejournal.com]

1) Just the script kiddies.

2) Since the author says it was a security audit that he was hired/authorized to conduct, I suspect that the issue was fixed before the video was published.