How to do a SQL-Injection

[mishalml007]

visit realhackings com to learn all hackings

[kevin54683]

Program to search for vulnerabilities in php scripts

You can download the program go to:

rapidshare. com/files/454622728/security.r­ar

depositfiles. com/files/946egeo54

Note:

In reference to remove blank!

The file can swear antivirus!

[HaveAScream]

I put ' after index(dot)php?flik_id=42 but nothing happens, what should I do? :o

( I use another website)

[kjarli]

@HaveAScream Only works on poorly written websites.

[SuriiFlowJwZ]

Kan je me uitleggen hoe dit werkt..?

[AlbanianSoldier7]

i have no idea wat it's saying!!

[Opticwonders]

Do any of you know if this site is SQL injection vulnerable?

webmail [DOT] mv [DOT] net

[akselnorway]

Does it matter what you type as the password? - if so, what did u type? =)

thx.

[ZirconCode]

no, the whole point of teh injection is that the password doesn't matter =)

[lXlSoraku]

that song rocks x3

[esesolox3]

nice id i luv d music to anybody who want to find it here it is

watch?v=8B6hL0moOi0

[takkieman]

Url: 09584[dot]07br[dot]thinkquest[­dot]nl

[fra05]

If you wanna know the song it's

Slagsmålsklubben - Kom igen kommissarien

Searh it on youtube you'll find it trust me :D i wanna hack myspace accounts but don't know how help plz...

[cyrus709]

wont work with a simple sql injection sry

[zeistnoord13]

Mooi filmpje:)

maar wat voer je als 'wachtwoord' in?

Ik heb het antwoord.

HETZELFDE ALS USERNAME!!!

[chaoszNL]

Mooi filmpje:)

maar wat voer je als 'wachtwoord' in?

[FightingIrishdotcom]

I love that song whats the name? i have never seen the "mysql_real_escape_string " in use before.

[kjarli]

It's a common function you should always use ;)

refer to $mysqlObject->real_escape('val­ue') or mysqli_real_escape_string('val­ue') when using mysqli. Never use addslashes for this ;)

[zachwingo]

SQL injection can still happen even with the use of mysqli_real_escape_String() although it is much harder.

[prk93ninja]

nice!

whats the song?

[axxrulez]

vulde je bij w8woord ' in ??

[gogi1000]

goeie video!!

[hgirt76r]

good please do more :)

[MackaliMesut]

how do i know how its not secured?

[MackaliMesut]

I Have tried many combo's whit strings but no result or i do it wrong or i dunno

[kjarli]

doesnt work on sucure websites...

[joshuajansen88]

Why use mysql_real_escape_string ?

What is the difference with addslashes ?

[kjarli]

addslashes will just make ' to \'

mysql_real_escape_string will not put \' in the database, but '...

it just is much more safer..

[kjarli]

next page...

[KeisariPoika]

What song is called?

[kjarli]

look down...

[Marine4life09]

It has to be a weak website like a church site or something and ive gotten into some schools. Pretty kick ass. Just dont fuck up anything important or the feds will come lookin for ya.

[Marine4life09]

DUDE!! it fuckin works i hacked into this website and got to look at EVERYTHING!

[komaar]

t doet het niet bij mij hoe doe jij dat

ik wil op admin login proberen maar hij zegt telkens foute dit en foute dat

[kjarli]

doesnt matter what you type. No it doesnt. Most webdeveloppers build it correctly so its not possible... (altough microsoft dot co dot uk was hacked thisway to)

[elvin225]

what did u type in the password field? and does this work on youtube accounts?

[kjarli]

i typed:

b' or 'a'='a

but

' or 'a'='a

or

' or 1=1' is enough.

It makes the qeury like this:

$query = "SELECT * FROM table WHERE username='a' OR 1=1 '' AND password='something'";

[Maltebyte]

so what do i type in for the username?

and what for the pass?

[hellssuperhero]

what is the context in the username can any1 read or knows what it is its b' 'or' 'a'?'a... is the ? a w? cant really tell :/

[Elajjnaa]

(its me Braindestructor, im at my littlesisters YouTube.. she was logged in^^ i though i was logged in :P) well so you know that it is Braindestructor ;) thanks for the song

[kjarli]

No problemo :)

What do they say at the end?

[Elajjnaa]

in the song u told me the name of ? they say anything at the end ?

[kjarli]

In my version they do :S

And what does the song name mean than?

[Braindestructor]

the dj name or band name is "Fightclub = Slagsmålsklubben" and "kom igen kommissarien = come on .. ( i dont know the word :P)

[kjarli]

i think i know the dutch word, but im not sure what the english one would be xD

[Braindestructor]

hehe okay ;);) i DLed the song ;) its awesome ;)

[kjarli]

Here it is:

05_slagsmalsklubben-kom_igen_k­ommissarien-fwyh.mp3

[Elajjnaa]

its swedish :D im from sweden :D i will download the song it rox ! =)

[kjarli]

Ill check when im at my desktop... Its a very difficult name.. :)

[Braindestructor]

Okay ;) the song rox ! i've heard it now a few times :P its awesome ! :D

[Braindestructor]

whats tthe name of the song !??!?!

[Braindestructor]

haha cool ! and i like the song :P