What do I DO Go to the Training: MySQL I challenge
Global Rank: 6729
Totalscore: 1955
Posts: 8
Thanks: 5
UpVotes: 5
Registered: 3y 245d
Last Seen: 3y 217d
The User is Offline
What do I DO
Mar 10, 2023 - 06:56:05 (3y 235d)
Mar 10, 2023 - 06:56:05 (3y 235d)
What am I meant to do here? I've exhausted every resource I could find on SQL injection and the only thing I can get is a database error.
Global Rank: 28
Totalscore: 380286
Posts: 213
Thanks: 226
UpVotes: 246
Registered: 18y 241d
Last Seen: 113d 22h
The User is Offline
RE: What do I DO
Mar 10, 2023 - 10:06:11 (3y 235d)
Mar 10, 2023 - 10:06:11 (3y 235d)
Maybe take your time and don't try to rush things 
This is based on one of the simplest SQLI techniques, which is also the most widespread thing you should find when researching.
But of course, you can't just always simply copy paste a solution and hope that it works.
A database error is a good start, actually.
Check out the source code, and look where and how you can potentially influence the query executed.
This is based on one of the simplest SQLI techniques, which is also the most widespread thing you should find when researching.
But of course, you can't just always simply copy paste a solution and hope that it works.
A database error is a good start, actually.
Check out the source code, and look where and how you can potentially influence the query executed.
Global Rank: 6729
Totalscore: 1955
Posts: 8
Thanks: 5
UpVotes: 5
Registered: 3y 245d
Last Seen: 3y 217d
The User is Offline
RE: What do I DO
Mar 10, 2023 - 14:18:46 (3y 234d)
Mar 10, 2023 - 14:18:46 (3y 234d)
Yeah, uh, problem with that, I'd already tried to use the source code to come up with my own input, and uh
Didn't work, gave the error again
Didn't work, gave the error again
Global Rank: 2
Totalscore: 747640
Posts: 441
Thanks: 501
UpVotes: 478
Registered: 17y 96d
The User is Offline
RE: What do I DO
Mar 10, 2023 - 15:09:24 (3y 234d)
Mar 10, 2023 - 15:09:24 (3y 234d)
I'd say the best way to understand what is happening is to run the code locally. That way you can debug it a bit (e.g. add some extra output) to see what is really happening.
Now, to really run the same code locally might be a bit involved, but setting up your own webserver with PHP and SQL will be useful for more than just this challenge. If you don't want to go that far now, you can get a long way by playing with online sandboxes that are available these days. Just make sure that for SQL the sandbox is using the same language variant as the challenge is (MySQL or MariaDB).
Now, to really run the same code locally might be a bit involved, but setting up your own webserver with PHP and SQL will be useful for more than just this challenge. If you don't want to go that far now, you can get a long way by playing with online sandboxes that are available these days. Just make sure that for SQL the sandbox is using the same language variant as the challenge is (MySQL or MariaDB).
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d
Last Seen: 64d 15h
The User is Offline
RE: What do I DO
Mar 11, 2023 - 16:20:42 (3y 233d)
Mar 11, 2023 - 16:20:42 (3y 233d)
I'd break a quote for this: 'Good Luck's'!
The geeks shall inherit the properties and methods of object earth.
jjsorianor, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 2137 times.
1 people are watching the thread at the moment.
This thread has been viewed 2137 times.