PHP - SQL Injection

[dug327]

0:15

[andmcg1]

By default, PHP has magic quotes turned on, so any POST/GET/COOKIE variables are already escaped. It is bad practice to rely on this, but it will probably save most people.

[Sl0uly]

u should try using procedures :P

[jbcoldflames]

0:01

[jbcoldflames]

0:00 SKIP ADD

[TMBlackCat]

lol

[KKKWebkinzLover]

Here's the problem here.

You did the injection wrong.

It's quite obvious.

[luck1435]

SQLI SCANNER PACK



[446646]

sql injection is not even that hard u_u

[spleken001]

fck uuuuuuuuuuuuuuuuuuuuuuuuuuuuuu­uuuuuuuuuuuuuuuuuuuu

uuuuuuuuuuuuuuuuuuuuuuuuummmmm­mmmmm

]hahahha

LOL

[sneakylight]

you even did it wrong >.>

[knif30flam3]

ahmm :)) thx :P

[danixvideos]

Thank you for your password ;).

[ps3rule98]

did someone say EHHHHHHHHHHHHHHHHHHHHHU HHHHHHHHHHHHHHHH

[CoolstorytroII]

UUUUUHHHHHHHHHHHH UUUUUUUUhhhhhhh Uuuuhhhh

And uuuhhhh

Uhm

And uhm

derp derp uhm

[Albbertt1]

badTUTO..

[roofdoubleflip]

mysqli prepared statements bye

[daniel1982]

ahmmmmmmmmmmmmmm i think he does it on uhmmmmmmmmmmmmmmmmm purpose.

[Singod2]

You dont need a function ffs.

[rumco]

lol what a piece of code. please disregard this as a tutorial for php

[TheRezaali]

I@ xFxB (crack the hash post in milworm they will update pass to you .

[IxFxB]

hey how do i get it to give me a password from a website?

[ShaunyBizzle]

Exploit the type of injections, then try injecting SELECT, UNION SQL queries to output details stored within the open database stream.

Rest is upto you to find out...

[Snet89]

While I agree with you that this is an important measure agains hacking, one more step would be a "division of power" so to speak. you would never use your root account to provide web services to your database... so why would you give a nonhuman account (which is only designed to be used in an insert statement) the ability to select or delete...

create special accounts with specific roles assigned to each (it will keep people from doing naughty things to your database)

[KKKWebkinzLover]

@Snet89 I very much agree to your statement. Thank you for posting.

[Snet89]

most of these questions you have can be learned through a few simple searches on google. For starters "JMCSD" every thing that falls under queries is done in SQL. It is really easy to learn, but some functions are dependent on the database server you are using. Secondly, most any tutorial you see that uses php has something to do with databases because that is one of the most powerful points of php... and it is extremely simple and easy to learn (reference google).

[NajanJan]

thanks for your tutorials.

the video is kind of fuzzy though.

do u have any tutorials using forms with a database?

I need to be able to connect my tables to my php webpge. how do I do that?

[hotwork2009]

mate, can you do a sample of php, doing downloading and uploading of files. will appreciate it very much . thanks mate.

[Snet89]

If you are just trying to upload you html files to a web server or something of that nature, you are better off using ftp (secure ftp recommended) having a page that anyone can view, which is only intended for your own use is not a good idea... yes you can restrict access, but why go through the trouble?

[hotwork2009]

YOU ARE A SEND FROM HEAVEN, MATE. for me who have extensive background in development on several platforms..You are an angel, saving me from starting on zero...All the best, thanks mate.

[JMCSD]

You should put some vids up of file manipulation up here man!! Seriously! Very informative videos man, they are very helpful. But yeah, file manipulation and maybe do you know how to write query's? Lol, teach what you can! Thanks man.

[SubZeroChaos]

Hey guyz if you want to make a simple Register script, it really is very simple just look up the Mysql "INSERT" QUERY.

-SubZeroChaos

[GOTTACUTLOOSE]

I have to say your tutorials are really great! Could you set up a Tutorial on how to allow users to intially set up an account, to set up Passwords and Usernames to slot into the MySQL Database, PS: Keep Up the Good Work Mate

[wheay21]

i dont get it can you explain further..pls

[greenguitar28]

he already said he is going to post a real tutorial soon... selective hearing much??

[wheay21]

but its almost a year. where is it?

[greenguitar28]

my bad- your right...