SELECT name FROM players yields some awfully interesting results

[vorpal-buildbot]

Reported on Discord by bakert#2193

[bakert]

| `cat /etc/passwd`                                                                  |
| `cat /etc/passwd`;                                                                 |
| `type c:\boot.ini`                                                                 |
| `type c:\boot.ini`;                                                                |
| |cat /etc/passwd .dat|                                                             |
| |cat /etc/passwd .html|                                                            |
| |cat /etc/passwd .htm|                                                             |
| |cat /etc/passwd |                                                                 |
| |cat /etc/passwd                                                                   |
| |cat /etc/passwd|                                                                  |
| |type c:\boot.ini .dat|                                                            |
| |type c:\boot.ini .html|                                                           |
| |type c:\boot.ini .htm|                                                            |
| |type c:\boot.ini |                                                                |
| |type c:\boot.ini                                                                  |
| |type c:\boot.ini|                                                                 |
| ¿'¿"                                                                               |

[stash86]

is this server issue?

[silasary]

We don't validate, sanitize, or captcha the signup form.
This means a lot of bots have probed the system over the years...

I think my favorite part is that we have 2900 "users" with the same password.

 SELECT COUNT(name) FROM `players` GROUP BY password ORDER BY COUNT(name) DESC LIMIT 10;
+-------------+
| COUNT(name) |
+-------------+
|        2917 |
|        1055 |
|         615 |
|         329 |
|         271 |
|         181 |
|          93 |
|          87 |
|          81 |
|          67 |
+-------------+
10 rows in set (0.02 sec)