In a recent post, I described an attack against a privileged account using a simple SQL Injection technique of updating data in a table. One of the things showed was an administrator using their user and password credentials, but being unable to log on.

In this case, the administrator might easily assume there are mistyping their password, try again, and at some point reset their password.

NEVER DO THAT.

I mean, you might need to reset your password, but don’t take this lightly. If you are logging in with a privileged account, and you should do this sparingly,

Filed under: Blog Tagged: administration, security, syndicated