Some POST requests give 400 Bad Request when word 'select' is in the body

raimonbosch nginx-forum at forum.nginx.org
Thu Sep 5 16:53:06 UTC 2019


Hi all,

we have seen that if you add the word 'SELECT' in some requests sometimes
you get a 400 Bad Request. It is a use case where we save contents via POST
to edit a item of our catalog. I suspect that nginx may interpret this
request as a some kind of SQL injection.

Do you know if it is a known bug?

nginx version: nginx/1.15.4

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285567,285567#msg-285567



More information about the nginx mailing list