Username: 
Password: 
Restrict session to IP 

Confirmation needed  Go to the Training: MySQL II challenge

Global Rank: 104
Totalscore: 165915
Posts: 30
Thanks: 31
UpVotes: 30
Registered: 275d 18h
cheerfulbull`s Avatar





Last Seen: 1h 39m
The User is Offline
Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
I guessed that I need to try to edit the table to get the hash I want, but my injections always say: Database error in file core/inc/GDO/db/GDO_Database.php line 130.
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?

Quote from Mark-Twain

( ͡° ͜ʖ ͡°)
Global Rank: 253
Totalscore: 87266
Posts: 1639
Thanks: 1338
UpVotes: 886
Registered: 16y 73d




Last Seen: 6h 36m
The User is Offline
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)
The geeks shall inherit the properties and methods of object earth.
Global Rank: 104
Totalscore: 165915
Posts: 30
Thanks: 31
UpVotes: 30
Registered: 275d 18h
cheerfulbull`s Avatar





Last Seen: 1h 39m
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 17, 2023 - 11:43:37

You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)


Hmm... then I don't see what to do.

Quote from Mark-Twain

( ͡° ͜ʖ ͡°)
Global Rank: 253
Totalscore: 87266
Posts: 1639
Thanks: 1338
UpVotes: 886
Registered: 16y 73d




Last Seen: 6h 36m
The User is Offline
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
Re-Read my post

In this select, you can select everything what you want.
The geeks shall inherit the properties and methods of object earth.
Global Rank: 104
Totalscore: 165915
Posts: 30
Thanks: 31
UpVotes: 30
Registered: 275d 18h
cheerfulbull`s Avatar





Last Seen: 1h 39m
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 18, 2023 - 12:05:37

Re-Read my post

In this select, you can select everything what you want.


The thing I don’t understand is, it always selects the password, so we’d need to know A password, but we don’t know any…

Quote from Mark-Twain

( ͡° ͜ʖ ͡°)
tunelko, Redknee, silenttrack, n0tHappy, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, JanLitwin17, SwolloW, dangarbri have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 853 times.