Username: 
Password: 
Restrict session to IP 

right?  Go to the PHP 0815 challenge

Global Rank: 100
Totalscore: 166683
Posts: 21
Thanks: 33
UpVotes: 19
Registered: 14y 273d






Last Seen: 76d 14h
The User is Offline
right?
Google/translate1Thank You!1Good Post!0Bad Post! link
Hi guys, I am not php expert, so be kind to meSmile It seems that problem with the code is that it uses in_array function and it doesn't check the input correctly. I can pass whatever and the sql statement gets printed as output. Should there be modified that part of code with foobar function? thanks PS.: delete the comment if I said to muchSmile
Last edited by gizmore - Jul 04, 2010 - 14:00:09
Global Rank: 241
Totalscore: 86356
Posts: 1520
Thanks: 1280
UpVotes: 807
Registered: 14y 288d




Last Seen: 9h 53m
The User is Offline
right?
Google/translate1Thank You!0Good Post!1Bad Post! link
Yeah maybe a bit too much.
I edited your post and checked your assumptions afterwards.
It seems like you were wrong though.

There is one position/var which obviously needs to get fixed :x
You can do it with very few chars.

Good Luck Smile
The geeks shall inherit the properties and methods of object earth.
Global Rank: 100
Totalscore: 166683
Posts: 21
Thanks: 33
UpVotes: 19
Registered: 14y 273d






Last Seen: 76d 14h
The User is Offline
right?
Google/translate1Thank You!0Good Post!1Bad Post! link
Thanks Gizmore, found the right pathSmile
Global Rank: 485
Totalscore: 48828
Posts: 34
Thanks: 48
UpVotes: 34
Registered: 12y 144d
Martin Thoma`s Avatar

Last Seen: 2y 89d
The User is Offline
RE: right?
Google/translate1Thank You!1Good Post!0Bad Post! link
It's not accepted, but wouldn't do XXXXX the trick?:

"SELECT 1 FROM `table` WHERE `id`=".XXXX$showX ;


Edited by gizmore:
You are very close.
btw it's XXXXX not XXXXX to XXXX a XXX to an XXX. ;)
The final solution does your idea with just two chars, but with the correct syntax you should already get different messages, saying you are close.

Good Luck!
Last edited by gizmore - Jun 22, 2011 - 00:16:08
Redknee, tunelko, silenttrack, n0tHappy, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0 have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 9068 times.