Username: 
Password: 
Restrict session to IP 

Confirmation needed  Go to the Training: MySQL II challenge

Global Rank: 539
Totalscore: 45416
Posts: 11
Thanks: 10
UpVotes: 9
Registered: 61d 13h
cheerfulbull`s Avatar


Last Seen: 9h 3m
The User is Offline
Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
I guessed that I need to try to edit the table to get the hash I want, but my injections always say: Database error in file core/inc/GDO/db/GDO_Database.php line 130.
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?
Global Rank: 250
Totalscore: 86667
Posts: 1598
Thanks: 1312
UpVotes: 842
Registered: 15y 223d




Last Seen: 32s
The User is Online
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)
The geeks shall inherit the properties and methods of object earth.
Global Rank: 539
Totalscore: 45416
Posts: 11
Thanks: 10
UpVotes: 9
Registered: 61d 13h
cheerfulbull`s Avatar


Last Seen: 9h 3m
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 17, 2023 - 11:43:37

You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)


Hmm... then I don't see what to do.
Global Rank: 250
Totalscore: 86667
Posts: 1598
Thanks: 1312
UpVotes: 842
Registered: 15y 223d




Last Seen: 32s
The User is Online
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
Re-Read my post

In this select, you can select everything what you want.
The geeks shall inherit the properties and methods of object earth.
Global Rank: 539
Totalscore: 45416
Posts: 11
Thanks: 10
UpVotes: 9
Registered: 61d 13h
cheerfulbull`s Avatar


Last Seen: 9h 3m
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 18, 2023 - 12:05:37

Re-Read my post

In this select, you can select everything what you want.


The thing I don’t understand is, it always selects the password, so we’d need to know A password, but we don’t know any…
tunelko, Redknee, silenttrack, n0tHappy, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 521 times.