![Waraxe IT Security Portal](themes/Helius/images/logo.jpg) |
|
![](themes/Helius/images/7px.gif) |
![](themes/Helius/forums/images/top_left.gif) |
Menu |
![](themes/Helius/forums/images/top_right.gif) |
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
User Info |
![](themes/Helius/forums/images/top_right.gif) |
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 81
Members: 0
Total: 81
|
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
Full disclosure |
![](themes/Helius/forums/images/top_right.gif) |
|
|
![](themes/Helius/images/top_left.gif) |
|
![](themes/Helius/images/top_right.gif) |
![](themes/Helius/forums/images/logo1.gif) |
|
![](themes/Helius/forums/images/logo2.gif) |
IT Security and Insecurity Portal |
|
![](themes/Helius/forums/images/top_left.gif) |
Help on SQL injection |
![](themes/Helius/forums/images/top_right.gif) |
Posted: Fri Oct 22, 2004 5:20 am |
|
|
x303 |
Beginner |
![Beginner Beginner](modules/Forums/images/ranks/rang1.gif)
![](modules/Forums/images/avatars/205625723740bc4ffa16560.gif) |
|
Joined: May 31, 2004 |
Posts: 3 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
Greetings!
Is it possible to inject a INSERT or UPDATE request?
im not sure UNION can do this....
ex.
mysql_query("SELECT * FROM my_table WHERE name='$name'");
then i type: http://www/?name=1 UNION SELECT ALL 1=1 /*
but i want to do this: UPDATE my_table SET name = 'new_name' WHERE name='current_name'
any help, suggestions, tips? ![Confused](modules/Forums/images/smiles/icon_confused.gif) |
|
|
|
|
Posted: Fri Oct 22, 2004 12:14 pm |
|
|
kajnes |
Beginner |
![Beginner Beginner](modules/Forums/images/ranks/rang1.gif)
![](modules/Forums/images/avatars/90737343040e92655807fc.jpg) |
|
Joined: Jun 29, 2004 |
Posts: 3 |
Location: Poland |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
Hi,
With UNION (or UNION ALL) you can only SELECT from database;
index.php?blabla=334%20UNION%20ALL%20SELECT%
201,2,3,4,5,6,name%20FROM.......
If you want to INSERT or UPDATE;
for example;
INSERT INTO cats VALUES (?Fido?,?cat?,?1999?) or something
index.php?cats=3;INSERT%20INTO%20cats%20
VALUES%20('Fido','cat','1999')..............
----
kajnes |
|
|
|
|
Posted: Fri Oct 22, 2004 12:16 pm |
|
|
kajnes |
Beginner |
![Beginner Beginner](modules/Forums/images/ranks/rang1.gif)
![](modules/Forums/images/avatars/90737343040e92655807fc.jpg) |
|
Joined: Jun 29, 2004 |
Posts: 3 |
Location: Poland |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
Just remember - famous Fido was a dog ![Laughing](modules/Forums/images/smiles/icon_lol.gif) |
|
|
|
|
Posted: Sun Oct 24, 2004 12:28 pm |
|
|
emrag |
Regular user |
![Regular user Regular user](modules/Forums/images/ranks/rang2.gif)
![](https://www.waraxe.us/images/blank.gif) |
|
Joined: Jun 03, 2004 |
Posts: 20 |
Location: TURKEY |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|