Monday, August 31, 2009
Sheyla Hershey - Record-Breaking Breasts
One woman stopped at nothing to achieve her twin dreams: a 38KKK bust, and a world record
We were already fairly impressed last April, when we heard (via ABC) that one Sheyla Hershey traveled to Houston for a boob job. And not just any boob job: An enhancement bound for the record books. Because after eight surgeries and a full gallon of silicone, the petite model/actress was a staggering 34 FFF.
Still, Hershey wanted more! And she was determined to get it. When her boyfriend begged her to stop, she broke up with him (note to men: You have to support our dreams, no matter how deluded and life-threatening silly they might seem!).
But Hershey was forced to settle with her FFF mosquito bites because "the state of Texas has limits on the amount of silicone that can be injected into breast implants," noted ABC. Reading this, we found ourselves impressed by Texas, because we didn't think it was the kind of state to impose limits on such things, what with the Dallas Cowboys cheerleaders and the state priding itself on everything being bigger there and whatnot.
But, as Hershey discovered through diligent research, they have no such restraint in Brazil! And so now, after a ninth surgery, she's the proud owner of both a 38KKK bust (according to Britain's Daily Star) and the world record for largest breasts. We wonder if Guinness has a category for worst back pain.
Sunday, August 30, 2009
Ford India to launch small car in India
Ford India Friday said it will launch a small car in 2011 in order to tap the growing market for compact cars in the country.
“The launch will be a game changer. It will take us into the centre of Indian market,” said Ford Motor executive vice president for Asia Pacific John Parker.
The car will be priced between Rs.3-4 lakh. “It will be in the range that 70 percent Indian consumers buy,” Parker told reporters on the sideline of the annual convention of the Society of Indian Automobile Manufacturers (SIAM).
Ford has invested about $500 million in India since 2008.
The company will also launch a refurbished version of its sports utility vehicle – Endeavour – next month.
“We will launch a significantly improved Ford Endeavour in a week’s time. Consumers were looking for higher technology in the product and they will get the same,” said Ford india president and managing director Micahel Boneham.
SRK, Hrithik attend Arjun Rampal’s restaurant launch
Shah Rukh Khan was there with wife Gauri, Hrithik Roshan came with wife Suzanne and Karan Johar was in attendance too. Model-turned actor Arjun Rampal got Bollywood celebrities in the capital for the launch of his restaurant Lap in Samrat Hotel.
On this red-carpet event Friday evening, Imran Khan was also there with his girlfriend Avantika.
Rampal said: “You have to become a member to know how incredible this place is. It’s for people to enjoy. India can proudly say, we have a place to party. It’s about privacy, a place to discover yourself.”
Top-notch designers like Rohit Bal, J.J. Valaya, Reena Dhaka and Tarun Tahilyani were present too.
Kumble’s wife, ex-husband in custody battle over daughter
Cricketer Anil Kumble’s wife Chethana has withdrawn her custody case over her 14-year-old daughter Aaruni with her former husband Kumar V. Jahgirdar in the Supreme Court. The case will now reopen in a family court in Bangalore.
Chethana has challenged a Bangalore family court’s decision to entertain Jahgirdar’s plea for custody of their daughter, who is living with her and Kumble.
Jahgirdar said he is “very confident” of proving in a family court that the “child wants to live with me” and is “is better served in my house”.
The Supreme Court July 27 asked Chethana to try for an out-of-court settlement with Jahgirdar. A bench of Justice Tarun Chatterjee and Justice R.M. Lodha gave this advice to the two while hearing her lawsuit.
Jahgirdar’s lawyer Prashant Bhushan Friday said that mediation had failed due to the “non cooperation of the mother of the child” and a trial court has to decide on the merits of the case and changed circumstances since the father has remarried.
Since the mother has two more children from Anil Kumble and needs more time for them, the girl’s father is best suited to take care of Aaruni and shower her undivided love, affection and attention.
Chethana’s lawyer Mukul Rohtagi objected to this saying that there is no need to reopen the case in the family court, but judges Chatterjee and Lodha said custody matters are always subject to change according to the circumstances and in the best interest of the child.
Later, Chethana’s lawyer withdrew the case.
Jahgirdar and Chethana got divorced in 1999 and within months Chethana married Kumble.
She moved the Bangalore family court in December 1999 for custody of her then six-year-old daughter left behind with her father. Jahgirdar too moved the family court seeking custody of Aaruni.
The family court subsequently endorsed his plea and allowed him to keep the child.
But on an appeal from Chethana, the Karnataka High Court reversed the family court ruling and gave the daughter’s custody to her mother, saying that in her early years the child’s upkeep and welfare would be taken care of better by a female family member.
As Jahgirdar was living alone then, the child’s interest would be better served in the custody of her mother, the high court said.
In 2004, approached by Jahgirdar, the apex court endorsed the high court’s ruling in favour of the mother.
Jahgirdar re-married in 2006. He again moved the family court seeking the child’s custody on the grounds of changed circumstances.
Chethana first moved the high court challenging the family court’s decision to entertain Jahgirdar’s plea, but her plea was dismissed. She then moved the apex court.
Himesh launches music of Radio at Ganpati Mandal
Mumbai: Trust Himesh Reshammiya to do things differently and in style. The singer-music composer-actor launched the music of his latest film Radio today amidst lakhs of devotees at the famous Lalbaugcha Raja Ganpati Mandal in Mumbai. Present at this occasion were Himesh, Bhushan Kumar of T-Series, Prashant Pandey of Radio Mirchi besides the cast and crew of the film.
Speaking about this, Himesh says, "Goddess Saraswati has blessed me with superb tunes and Lord Ganeshji has given me the opportunity to launch my film Radio's music at his doorstep. It is a very happy moment for me and truly a lifetime experience."
Radio has Himesh playing a RJ called Vivaan and giving him company would be Sonal Sehgal and Shenaz Treasurywala. The film is produced by Ravi Agarwal and written and directed by Ishaan Trivedi.
The music of Radio features two distinct voices of Himesh Reshammiya- one his popular nasal voice and the other the middle octave base voice. The song 'Mann Ka Radio' featuring Himesh in a new short-hair look has already caught on big time. Hope Radio proves to be a truly musical experience for fans of HR.
100 million broadband connections in three years: Pitroda
Bangalore: Chairman of National Knowledge Commission Sam Pitroda on Saturday said the Commission has set a target of providing 100 million broadband connections in the next three years.
"We are targeting 100 million broadband connections in the next three years from the present six million at present", he said at a panel discussion on "Transforming India: Reaching the Bottom of the Pyramid", an initiative of C-DOT alumni as part of the silver jubilee celebrations here.
The Commission was optimistic about achieving the target as "the necessary infrastructure, fibre network is already in place apart from the political will," Pitroda said.
He highlighted the need for a "change in the mindset of the government to bring about transformation and to take ICT to those at the bottom of the pyramid i.e the rural poor" and emphasised on an urgency to do away with the government system of filing and go in for electronic filing.
"We can play an important role in sensitising people about it. Though it is a slow process, we need to plant the seeds now", he said.
Thursday, August 27, 2009
Seven types of guys women can't resist
Well, the secret is not good looks or a well-defined six pack, but the fact that women simply get attracted to certain personality traits and flock to men who possess them.
Below are seven of these "ideal types" of guys that women are drawn to, and an explanation as to why these guys are so appealing, reports Fox News .
The list could help you understand what women are looking for, and most importantly, to make sure that you fit the bill.
The Romantic Guy
He believes in classic romance. He is constantly bringing her flowers and chocolate and lighting candles during dinner. He calls her often to let her know he is thinking about her and looks into her eyes and tells her how he feels.
Why he is so irresistible: A woman loves to feel appreciated, and the romantic guy makes this happen. He uses romantic gestures to show her he is thinking about her. As an added bonus, she feels free to reciprocate and act on her own romantic tendencies.
The Confident Guy
He is totally secure and sure of himself. He is assertive in public and gives off an aura of power and control. In a relationship, he doesn''t get jealous of other men; he doesn't feel threatened by his girlfriend''s male friends or co-workers.
Why he is so irresistible: Women are attracted to confident men. Consider this: If you think you are great, she will probably be influenced to think the same. The confident man doesn''t seek approval from women, and this makes them want him even more.
The Artistic Guy
The artistic guy is spontaneous and lives for the moment. Often, he will use his creativity to woo her, such as with a song he has written about her or a painting he has made for her.
Why he is so irresistible: Every woman wants to feel unique and special. There is no better way to make her feel this way than to use her as your muse or your source of inspiration. She is intrigued by the artistic guy''s creative mind and especially by the way he incorporates her into his art.
The Foreign Guy
He comes from a faraway exotic country and he might have a cute accent or a unique way of seeing the world. His social customs and everyday behaviour can be a little quirky, but he always manages to come off as uniquely charming.
Why he is so irresistible: Women often choose this kind of guy if they are curious about the world, but most of the appeal comes down to a fascination with dating someone from another culture.
The Free Spirit Guy (aka the Bad Boy)
The free spirit guy goes where the wind takes him - and the wind usually takes him on some kind of wacky adventure. He might ride a motorcycle, or he might skip work to take her on a last-minute road trip, but this guy doesn''t worry too much about the consequences- he just sees where his own devices take him.
Why he is so irresistible: Every woman wants a bit of a rebel. She loves his carefree attitude and hopes that it will rub off on her too. The bad boy spirit adds an element of youthfulness to the relationship and she loves to try taming him, although she knows she''ll never actually succeed.
The Intelligent/Witty Guy
He instigates conversations that are intellectually stimulating and listens to what she has to say in response. He makes her laugh with his clever sense of humour and has an uncanny ability to make politics interesting. He can shoot the breeze with her for hours and it will never get boring.
Why he is so irresistible: An intellectual connection is a big part of what sustains a relationship and if you can show her that you''ve got that, she''ll be hooked pretty quickly.
The Considerate Guy
He holds open her car door and pulls out her chair. He foots the bill for dinner and makes sure to offer her dessert. He always asks her out with reasonable notice and picks her up at her door. He is generally sensitive to how she is feeling and when she is ready to go home.
Why he is so irresistible: Once a woman has gone through her share of the bad guy, the rude guy and the not-calling-her-back guy, she will likely re-evaluate her priorities. It takes a bit of maturity on her part to realize this, but eventually most girls come around and realize that they want a guy who will treat them well in the long run
Wednesday, August 26, 2009
Baby born with heart outside chest
MUZAFFARPUR: A baby girl was born with her heart outside her chest at a private nursing home here on Wednesday, a doctor attending on her said.
Cardiologist Rajiv Kumar said, "We have kept her in the intensive care unit. The heart beats of the baby are normal."
Bibha Devi, a labourer's wife from Parihar village in Sitamarhi district, delivered the baby at the nursing home.
Arrangements were being made to send her to the All India Institute of Medical Science (AIIMS) in New Delhi for a follow-up medical attention, he said.
He said it was a rare case in India and perhaps the second after the one reported from the USA in 1975.
Adi to direct SRK in Dhoom 3
Reclusive director Aditya Chopra, who is perfectly content to oversee and remote control the YRF empire while leaving the actual direction of the films to someone else, is now excited at the possibility of Dhoom 3, especially if his wish list of actors is satisfied.
Reportedly Shah Rukh Khan , who can never say no to Adi, has consented to be part of the film. An equally important role has been offered to Hrithik Roshan. Hrithik who is fastidious to a fault sometimes, is supposed to be mulling over the offer, even as he stays busy with his home production Kites and his new film with Sanjay Leela Bhansali, Guzaarish.
Abhishek Bachchan will of course reprise the Jay Dixit of the earlier two films and Uday Chopra will continue to play the lovable Ali who woos all the pretty girls.
But the icing on the very crowded cake will be that Aditya Chopra will direct the film. But, and this is a big but, only if all the said actors are in place.
But then, has anyone been known to refuse Adi? We think not.
Check out Shahrukh Khan’s Homepage
Monday, August 24, 2009
Miss Venezuela wins Miss Universe 2009,Top 15 list
Here are the Top 10 Finalists (in random order):
- Miss Australia – Rachael Finch
- Miss Venezuela – Stefania Fernandez
- Miss South Africa – Tatum Keshwar
- Miss Dominican Republic – Ada Aimee De la Cruz
- Miss Kosovo – Gona Dragusha
- Miss Czech Republic – Iveta Lutovska
- Miss Switzerland – Whitney Toyloy
- Miss Puerto Rico – Mayra Matos Perez
- Miss USA – Kristen Dalton
- Miss France – Chloe Mortaud
2009 Swimsuit Scores: http://baklaako.com/2009/08/24/miss-universe-2009-swimsuit-scores/
Universe 2009 Top 15 Semi-Finalists: http://baklaako.com/2009/08/24/miss-universe-2009-15-semi-finalists/
Miss Universe 2009 Live Stream: http://baklaako.com/2009/08/24/miss-universe-2009-live-stream/
ShareThisFernandez who enjoys tennis and swimming inherited the coveted Miss Universe crown from fellow Venezuelan Dayana Mendoza who won the competition in 2008. The Latin American nation of 20 million people could very well become the beauty capital of the world. Venezuela has won five Miss Universe titles, five Miss World and four Miss International crowns more than any other country in the world.
Sunday, August 23, 2009
I'll marry for kids: Salman Khan
Saturday, August 22, 2009
Ganesh chaturthi pooja Scraps,wallpapers(SMS,Songs,Cards)
Ganesh Chaturthi is observed on the fourth day after Amavasi (no moon) in the month of Bhadrapada (August - September) as per traditional Hindu calendar.
In Andhra Pradesh and Maharashtra, Ganesh Chaturthi community festival is celebrated for 10 days. In other parts of India, it is celebrated for one day on the Ganesh Chaturthi day.
Hindu homes observe Ganesh Chaturthi festival for one or three days. Special prayers are performed in all Hindu homes and hymns and songs are sung in praise of Lord Ganesha.
In Maharashtra, Ganesh and Gauri Puja is observed during the same period.
In Karnataka, Gowri Habba or Swarna Gouri Vrata is observed a day before Ganesh Chaturthi.
Friday, August 21, 2009
Rakhi: Can Elesh tolerate my nude pics?
Rakhi and Elesh More Pics |
Rakhi Sawant goes into her second reality show from Wednesday. It’s a show about parenting with Rakhi and Elesh playing mother and father.
There’s one hitch. Babies give Rakhi a headache. “I’ve a migraine problem. When a child cries I get a severe headache . I don’t know how I’ll manage for a month with a stranger’s child. On top of that I’ve to cook on the show. I can’t cook to save my life.”
Ask her how she will cope when she has her own kids and Rakhi retorts, “Apna bachcha to har koi paal leta hai, jaanwar bhi. I don’t know how I’ll cope. I think I’m going to lose my cool completely. So far people have only seen the good Rakhi Sawant. Now they’ll see the real me. Elesh returned from his sister's wedding on Tuesday night. We enter the show from Wednesday. I don’t know how I’ll manage. This show is already giving me a headache. I can’t even use makeup. Can you imagine Rakhi Sawant without makeup?”
Rakhi was supposed to visit her reality-show fiancé Elesh’s home -town in Toronto. “But I couldn’t get a visa from the US to Canada. I had to really get pushed around for my US visa. It was impossible to get a visa from the US to Canada. Elesh’s family was very keen to have me over. They came for my Swayamvar all the way to Mumbai. And I couldn’t for for them. But no problem. As soon as my new reality show Pati Patni Aur Woh is over I’ll visit his family in Toronto with Elesh.”
Rakhi says she’ll marry Elesh only when he becomes economically self sufficient. “It’s my life and a decision like marriage should be left to me only. Elesh may be the best person in the world. But he may not be be the best person for me.I don’t want him to be another Abhishek Awasthi in my life. Yes,we’re engaged. I like him a lot. But how can I hand over my life to someone who isn’t earning a proper living? That’s why we’re going on another reality show to see whether we’re really as compatible as we seemed on Rakhi Ka Swayamvar.I didn’t get enough time on him on that show. You and I saw his best face.Now I want to see the real Elesh.I want to marry a man who can support me. When we go to a restaurant he should pay the bill, not me. In India wives are supposed to be looked after by husbands, not vice versa. He has seen how I live. I don’t want him to come and stay in my house I want to live in his house. I will wait for him to afford a house.I will wait.”
Rakhi is specially worried about Elesh accepting her sexy image. “On the internet they’ve morphed my face on naked bodies. Would Elesh be able to tolerate it? He’s broad-minded, yes. But God knows what he’d be like after marriage.”
She bursts into tears. “Mere dil mein bahut taqleef hai. Will Elesh be able to support me financially? I don’t want him to be known as Rakhi Sawant’s husband. Mujhe waqt chahiye. I feel I’m stuck in a stormy ocean.I can’t climb the cross just to please public. I agree Elesh is educated and he comes from a wealthy family. But all of it belongs to his father. He has nothing of his own in Mumbai, not even a home. He needs time to settle down. In the meanwhile people are spreading dirty rumours about me. Ek insaan kitna bardaasht kare?”
Rakhi is disgusted by singer Mika’s attempts to make mileage out of her name. “I’m really tired of people using my name. I don’t want to give such people more importance. I’ve learnt the hard way how to be dignified.Jesus has taught me to be calm. My good days are just beginning. Let me remind these publicity seekers that short cuts don’t get you anywhere.”
Rakhi says she’s going through a lot of turmoil. “They are writing all kinds of things making up all kinds of quotes about Elesh on my behalf. They’re all taking advantage of me. I’m being used for publicity by so many people. Why are people doing these things with me? Jesus knows how much I’m suffering.”
Speaking on her former boyfriend Abhishek Awasthi Rakhi says, “I still consider him my good friend. I hope and pray he finds a good girl to marry. If ever in life he needs me I’ll always be there. If needs me to be a dance partner in a reality show I’ll gladly do the needful. He has supported me a lot. I’ll always be thankful to him for getting my mother out of my life. That’s one good deed he did. If Abhishek hadn’t been there I’d have not had the courage to break away from my family. I’d have been wallowing in mud. Aaj Rakhi Swant nahin hoti. I’d have been something else. I can’t even say what I’d have been.”
Rakhi thinks her good days have started. “I know Elesh is a decent guy. But is that enough? He has be financially independent. He needed a place and a face to latch on to, that’s why he came on the show. Abhishek Awasthi was so decent. But he was know as Rakhi’s boyfriend.”
Wednesday, August 19, 2009
The indiscreet art of Dadagiri
The assassination of Savita Bhabhi
Sehwag is right, Support him
To any observer of how sports in this country is managed, rather mismanaged, cricketer Virender Sehwag’s decision to challenge the honchos of Delhi and District Cricket Association comes as no surprise. The only surprise is that it has taken so long in coming.
Now there is a whisper campaign that Sehwag is riled because one of his relatives wasn’t picked in the team, hence his threat. Even if it were true, no one is buying the argument and the association bosses must blame themselves for this pitiable state. The whimsical manner in which they have run the association all these years, without accountability, deserves no better.
If anything, I would commend Sehwag for finally taking the stand, as also the decision of some other Delhi players to stand by him. Sehwag, of course, will get the support of not only his fellow players, but also the common man, because he plays the sport that is a religion in India and he has delivered what the public expects of him.
I did not ask for anyone to be selected: Sehwag
And honestly, why blame DDCA alone? One keeps hearing of similar instances from other cricket associations as well. One Uttarakhand player, for example, once came up to me and said he was asked to shell out Rs 10 lakh to be able to get in the 16-member state team (not the playing 11, mind you). I brought this to the notice of the powers-that-be in the state, but doubt if anything happened. I only know that the youngster is now with a call centre in the National Capital Region.
Come to think of it, relatively speaking, cricket is actually one of the better managed sports in this country. If this is the state of cricket, one shudders to think of the the state of affairs in other sports.
There have been disturbing reports in recent times. One talked about a national level player who has resorted to prostitution to make ends meet, and another report showed pictures of women national athletes serving tea and coffee to pot-bellied, slimy, officials at NIS in Patiala. But so immune have we become to such instances that they hardly stirred anyone.
Babus and manipulative politicians, who cannot tell a football from a volleyball, are those who run the show in most places. As long as they get to travel the world as Indian delegation (remember various events when the official delegation is far larger than the participants), they couldn’t care less.
Can the government do anything to help? Yes and No. Ideally, sportsmen should themselves run the sports, for they have been through it all and would, hopefully, be able to understand what the fresh crop require to deliver at the world stage. As for the government, it should merely play the role of an honest facilitator. If facilitating means making the real sportspersons wait outside some babu’s office for hours, it won’t do. It has to ensure that those who are to facilitate are told in no uncertain terms that they are to play a supportive role, and not usurp the role of controlling the sportspersons.
And before I end, please look up the logo of the government’s Sports Authority of India. It has an athletic track that shows motion in clockwise direction. Any fool will tell you that all athletic events take place anti-clockwise. And there rests my case!
Female Sex Offenders: Women Who Rape
Sexual abuse has traditionally been seen as a crime perpetrated by men. To eliminate this possibility, all of the instances chosen for these pages are cases where women are clearly acting entirely on their own. In those instances where a male is involved, it is in every case with an unwilling or obviously underage male.
There is no "evil man in the background" urging these women to engage in sexual abuse. In every case accepted for inclusion in this section, all evidence indicates that the women are acting on their own initiative.
There have been many explanations offered for the startling rise in the proportion of sex crimes committed by women. These include:
- zealous prosecution of sex crimes that went unpunished in earlier times
- false accusations by spouses who want custody of children
- a change in the behavior of women
This first story, however, may represent a change in the behavior of some women:
26 JAN 1999
STATES NEWS SERVICE
Cops: Topless Woman Attacked Boy
APOPKA, FLORIDA -- Deputies in Central Florida have arrested an Apopka woman accused of molesting a 14-year-old boy at a lake in Orange County. The youngster says 37-year-old Teresa M. removed her top, rubbed against him, and then pinned him to the ground with her 150-pound weight and fondled him against his will. The teen got away when the woman suggested they go for a ride in her pickup truck.
24 Feb 2006
Teacher accused of sex with 11-year-old boy
An elementary school teacher was arrested Friday and charged with two counts of criminal sexual conduct with a minor after a parent claimed the woman had sex at the school with one of her 11-year-old students.
1 Dec 2005
Courts get tough on women who have sex with boys?
Courts across America are cracking down on women, especially teachers, who have sex with under-age boys. In the past month at least seven women, four of them teachers, have been charged or sentenced.
A US Department of Education study released in June last year found that 7 per cent of pupils were victims of physical or sexual abuse by teachers or other school employees. Of those, 22 per cent were victimised by a woman.
"Whether a boy might enjoy the attention or not is actually irrelevant. Many of the girls who are sexually abused by males say that they are willing or are in love," said Professor Charol Shakeshaft, of Hofstra University, the author of the report.
26 Nov 2005
Grow up, judge tells teacher in kissing case
The teacher originally told police she had "stupidly" kissed the teenager, but then accused him of assaulting her.
23 Nov 2005
No jail time for Florida teacher in sex case
Teacher will not serve any jail time in connection with her multiple sex acts with a 14-year-old student.
Tuesday, August 18, 2009
How to hack a website
I want to worry you.
video:http://www.youtube.com/watch?v=w3OZq_9Ex_I
I want to show you just one way that hackers can get in to your website and mess it up, using a technique called SQL Injection. And then I'll show you how to fix it. This article touches on some technical topics, but I'll try to keep things as simple as possible. There are a few very short code examples written in PHP and SQL. These are for the techies, but you don't have to fully understand the examples to be able to follow what is going on. Please also note that the examples used are extremely simple, and Real Hackers™ will use many variations on the examples listed.
If your website doesn't use a database, you can relax a bit; this article doesn't apply to your site — although you might find it interesting anyway. If your site does use a database, and has an administrator login who has rights to update the site, or indeed any forms which can be used to submit content to the site — even a comment form — read on.
Warning
This article will show you how you can hack in to vulnerable websites, and to check your own website for one specific vulnerability. It's OK to play around with this on your own site (but be careful!) but do not be tempted to try it out on a site you do not own. If the site is properly managed, an attempt to log in using this or similar methods will be detected and you might find yourself facing charges under the Computer Misuse Act. Penalties under this act are severe, including heavy fines or even imprisonment.
What is SQL Injection?
SQL stands for Structured Query Language, and it is the language used by most website databases. SQL Injection is a technique used by hackers to add their own SQL to your site's SQL to gain access to confidential information or to change or delete the data that keeps your website running. I'm going to talk about just one form of SQL Injection attack that allows a hacker to log in as an administrator - even if he doesn't know the password.
Is your site vulnerable?
If your website has a login form for an administrator to log in, go to your site now, in the username field type the administrator user name.
In the password field, type or paste this:
x' or 'a' = 'a
If the website didn't let you log in using this string you can relax a bit; this article probably doesn't apply to you. However you might like to try this alternative:
x' or 1=1--
Or you could try pasting either or both of the above strings into both the login and password field. Or if you are familiar with SQL you could try a few other variations. A hacker who really wants to get access to your site will try many variations before he gives up.
If you were able to log in using any of these methods then get your web tech to read this article, and to read up all the other methods of SQL Injection. The hackers and "skript kiddies" know all this stuff; your web techs need to know it too.
The technical stuff
If you were able to log in, then the code which generates the SQL for the login looks something like this:
$sql =
"SELECT * FROM users
"WHERE username = '" . $username .
"' AND password = '" . $password . "'";
When you log in normally, let's say using userid admin and password secret, what happens is the admin is put in place of
SELECT * FROM users WHERE username = 'admin' and PASSWORD = 'secret'
But when you enter
SELECT * FROM users WHERE username = 'admin' and PASSWORD = 'x' or 'a' = 'a'
Notice that the string:
If there is only a single user defined in the database, then that user's details will always be returned and the system will allow you to log in. If you have multiple users, then one of those users will be returned at random. If you are lucky, it will be a user without administration rights (although it might be a user who has paid to access the site). Do you feel lucky?
How to defend against this type of attack
Fixing this security hole isn't difficult. There are several ways to do it. If you are using MySQL, for example, the simplest method is to escape the username and password, using the mysql_escape_string() or mysql_real_escape_string() functions, e.g.:
$userid = mysql_real_escape_string($userid);
$password = mysql_real_escape_string($password);
$sql =
"SELECT * FROM users
"WHERE username = '" . $username .
"' AND password = '" . $password . "'";
Now when the SQL is built, it will come out as:
SELECT * FROM users WHERE username = 'admin' and PASSWORD = 'x\' or \'a\' = \'a'
Those backslashes ( \ ) make the database treat the quote as a normal character rather than as a delimiter, so the database no longer interprets the SQL as having an OR in the WHERE clause.
This is just a simplistic example. In practice you will do a bit more than this as there are many variations on this attack. For example, you might structure the SQL differently, fetch the user using the user name only and then check manually that the password matches or make sure you always use bind variables (the best defence against SQL injection and strongly recommended!). And you should always escape all incoming data using the appropriate functions from whatever language your website is written in - not just data that is being used for login.
There's more
This has just been a brief overview. There are many more hacking techniques than SQL Injection; there are many more things that can be done just using SQL Injection. It is possible to directly change data, get access to confidential information, even delete your whole database — irrespective of whether the hacker can actually log in — if your website isn't set up correctly.
If you are hungry for more, this detailed article from SecuriTeam explains other techiques hackers might use, as well as some of the methods hackers use to work out the structure of your database, the userid of the admin user, gain access to your system's configuration, etc.
Have a nice weekend!
"Vasudev Jakhar"
source:http://www.ecademy.com/node.php?id=76050
Monday, August 17, 2009
Amitabh Worried About Aishwarya's Health
NEW DELHI -- Actress Aishwarya Rai is down with a "chest infection" and "flu-like symptoms" and her father-in-law, Bollywood megastar Amitabh Bachchan, is worried.
File photo of Indian actress Aishwarya Rai arriving for the opening ceremony of the 62nd International film festival in Cannes, May 13, 2009. (AP Photo/Joel Ryan)
"Aishwarya has taken ill and is down with chest infection and flu like symptoms. She had a high fever yesterday, but is settling down today," he posted on his blog www.bigb.bigadda.com Saturday from Singapore.
"It's worrying to be so far away from children and not be there to look after them. Yes, they are mature and married and responsible, but children will always remain children," he added. Ms. Aishwarya is married to Mr. Bachchan's son Abhishek.
The 66-year-old veteran is in Singapore to look after his friend and Samajwadi Party leader Amar Singh, who underwent medical treatment there.
"I stay back till he (Amar Singh) is sound enough to travel back," he wrote.
Apparently Mr. Bachchan also is suffering from a "strained back."