@emurphy said:
I can't decide whether this is a troll, a lack of English comprehension, or a lack of subject-matter comprehension. Oh well, I'll give it the benefit of the doubt:
- Some of the replies in this thread are sarcastic. If you can't tell which, then look for a friend who can.
- Why are you interested in second-order SQL injection? Are you creating software? Are you writing a paper?
- There are probably some tools that do and others that don't. For a really good answer, you should build a couple of test systems and a couple of first- and second-order SQL injection attacks against them, then test some tools and see what they actually detect in practice.
yes my english is n't good
thank you for informing me