{"text_format":"2","workbook":"xls","n_sheets":1,"sheets":["report2"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":1,"defined_names":2,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900","formulas":"cached_only"}

{"sheet":"report2","index":0,"n_rows":39,"n_cols":5,"rows_kept":39,"cut":false,"hidden":false,"merged":[[0,2,0,3],[0,4,0,5],[1,2,1,3],[1,4,1,5],[2,2,2,3],[2,4,2,5],[3,2,3,3],[4,2,4,3],[5,2,5,3],[6,2,6,3],[8,2,8,3],[9,2,9,3],[11,2,11,3],[11,4,11,5],[12,2,12,3],[12,4,12,5],[13,2,13,3],[14,2,14,3],[15,2,15,3],[16,2,16,3],[17,2,17,3],[18,2,18,3],[19,2,19,3],[32,2,32,3],[33,2,33,3]],"flags":["formulas_cached_only"]}
[null,"1.","Record Nr.",null,"UNIORUON00024280"]
[null,null,"Autore",null,"MITCHELL, Terence Frederick"]
[null,null,"Titolo",null,"Writing Arabic : a practical introduction to Ruq'ah script / by T.F. Mitchell"]
[null,null,"Pubbl/distr/stampa",null,"London, : Oxford University Press, 1953"]
[null,null,"Descrizione fisica",null,"163 p. ; 25 cm"]
[null,null,"Classificazione",null,"ARA II E"]
[null,null,"Soggetti",null,"CALLIGRAFIA ARABA"]
[{"$nulls":4},"Lingua araba - Scrittura"]
[null,null,"Lingua di pubblicazione",null,"Inglese"]
[null,null,"Formato",null,"Materiale a stampa"]
[null,null,null,"Livello bibliografico","Monografia"]
[null,"2.","Record Nr.",null,"UNINA9910483281003321"]
[null,null,"Titolo",null,"Information Systems Security : 6th International Conference, ICISS 2010, Gandhinagar, India, December 17-19, 2010 / / edited by Somesh Jha, Anish Mathuria"]
[null,null,"Pubbl/distr/stampa",null,"Berlin, Heidelberg : , : Springer Berlin Heidelberg : , : Imprint : Springer, , 2010"]
[null,null,"ISBN",null,"3-642-17714-X"]
[null,null,"Edizione",null,"[1st ed. 2010.]"]
[null,null,"Descrizione fisica",null,"1 online resource (XIV, 261 p. 60 illus.)"]
[null,null,"Collana",null,"Security and Cryptology, , 2946-1863 ; ; 6503"]
[null,null,"Disciplina",null,"004.6"]
[null,null,"Soggetti",null,"Computer networks"]
[{"$nulls":4},"User interfaces (Computer systems)"]
[{"$nulls":4},"Human-computer interaction"]
[{"$nulls":4},"Data protection"]
[{"$nulls":4},"Information storage and retrieval systems"]
[{"$nulls":4},"Electronic data processing - Management"]
[{"$nulls":4},"Biometric identification"]
[{"$nulls":4},"Computer Communication Networks"]
[{"$nulls":4},"User Interfaces and Human Computer Interaction"]
[{"$nulls":4},"Data and Information Security"]
[{"$nulls":4},"Information Storage and Retrieval"]
[{"$nulls":4},"IT Operations"]
[{"$nulls":4},"Biometrics"]
[null,null,"Lingua di pubblicazione",null,"Inglese"]
[null,null,"Formato",null,"Materiale a stampa"]
[null,null,null,"Livello bibliografico","Monografia"]
[null,null,null,"Note generali","Bibliographic Level Mode of Issuance: Monograph"]
[null,null,null,"Nota di bibliografia","Includes bibliographical references and index."]
[null,null,null,"Sommario/riassunto","2.1 Web Application Vulnerabilities Many web application vulnerabilities havebeenwell documented andthemi- gation methods havealso beenintroduced [1]. The most common cause ofthose vulnerabilities isthe insu'cient input validation. Any data originated from o- side of the program code, forexample input data provided by user through a web form, shouldalwaysbeconsidered malicious andmustbesanitized before use.SQLInjection, Remote code execution orCross-site Scriptingarethe very common vulnerabilities ofthattype [3]. Below isabrief introduction toSQL- jection vulnerability though the security testingmethodpresented in thispaper is not limited toit. "]
[{"$nulls":4},"SQLinjectionvulnerabilityallowsanattackertoillegallymanipulatedatabase byinjectingmalicious SQL codes into the values of input parameters of http requests sentto the victim web site. 1: Fig.1. An example of a program written in PHP which contains SQL Injection v- nerability Figure 1 showsaprogram that uses the database query function mysql query togetuserinformationcorrespondingtothe userspeci'edby the GETinput- rameterusername andthen printtheresultto the clientbrowser.Anormalhttp request with the input parameter username looks like \"http://example.com/ index.php'username=bob\". The dynamically created database query at line2 is \"SELECT * FROM users WHERE username='bob' AND usertype='user'\". Thisprogram is vulnerabletoSQLInjection attacks because mysql query uses the input value of username without sanitizingmalicious codes. A malicious code can be a stringthatcontains SQL symbols ork- words.Ifan attacker sendarequest with SQL code ('alice'-') - jected \"http://example.com/index.php'username=alice'-\", the query becomes \"SELECT* FROM users WHERE username='alice'--' AND usertype='user'\"."]