Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
How do you completely compromise a machine given a text box or badly validated input box? This is a place to talk about code issues (PHP includes, null byte injection, backticks, pipe, etc...) as well as how to properly construct an SQL injection attack. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
INSERT INTO in mysql with php - sqlinjection
Posted by: mpour
Date: February 15, 2014 12:46AM

Hi

can u help me .


I want to insert a new password to a database for a "admin" user.
I use the syntax:

insert into members values('admin',,,,'admin@localhost',,,,'','pass','admin','')

but no result returns.

I also use the following syntax:
"select @@version"

and i get a valuable result.

also the mysql version is 5.0.67 .



Edited 1 time(s). Last edit at 02/15/2014 12:56AM by mpour.

Options: ReplyQuote
Re: INSERT INTO in mysql with php - sqlinjection
Posted by: firestorm
Date: February 17, 2014 11:47PM

You cannot use insert in sqli like that.

What is the query you are injecting to?
If its union select, insert wont work with it. MySql does not allow it.
If the original query is insert into or it allows multiple query to execute then only you can insert.

Options: ReplyQuote
Re: INSERT INTO in mysql with php - sqlinjection
Posted by: hack2012
Date: March 09, 2014 09:09AM

where is the url???

Options: ReplyQuote


Sorry, only registered users may post in this forum.