right? Vai alla sfida "PHP 0815"
Posizione globale: 113
Punteggio totale: 165262
Posts : 21
Grazie: 33
Voti+: 19
Registrato: 18a 244gg
Ultima visita: 4a 47gg
L'utente è Offline
right?
04 Lug 2010 - 13:50:21 (16a 123gg)
04 Lug 2010 - 13:50:21 (16a 123gg)
Hi guys, I am not php expert, so be kind to me
It seems that problem with the code is that it uses in_array function and it doesn't check the input correctly. I can pass whatever and the sql statement gets printed as output. Should there be modified that part of code with foobar function? thanks PS.: delete the comment if I said to much
It seems that problem with the code is that it uses in_array function and it doesn't check the input correctly. I can pass whatever and the sql statement gets printed as output. Should there be modified that part of code with foobar function? thanks PS.: delete the comment if I said to muchUltima modifica: gizmore - 04 Lug 2010 - 14:00:09
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg
Ultima visita: 65gg 19ore
L'utente è Offline
right?
04 Lug 2010 - 14:05:09 (16a 123gg)
04 Lug 2010 - 14:05:09 (16a 123gg)
Yeah maybe a bit too much.
I edited your post and checked your assumptions afterwards.
It seems like you were wrong though.
There is one position/var which obviously needs to get fixed :x
You can do it with very few chars.
Good Luck
I edited your post and checked your assumptions afterwards.
It seems like you were wrong though.
There is one position/var which obviously needs to get fixed :x
You can do it with very few chars.
Good Luck
The geeks shall inherit the properties and methods of object earth.
Posizione globale: 113
Punteggio totale: 165262
Posts : 21
Grazie: 33
Voti+: 19
Registrato: 18a 244gg
Ultima visita: 4a 47gg
L'utente è Offline
right?
04 Lug 2010 - 15:16:03 (16a 123gg)
04 Lug 2010 - 15:16:03 (16a 123gg)
Thanks Gizmore, found the right path
Posizione globale: 535
Punteggio totale: 48908
Posts : 34
Grazie: 49
Voti+: 36
Registrato: 16a 115gg
Ultima visita: 6a 60gg
L'utente è Offline
RE: right?
22 Giu 2011 - 00:12:00 (15a 135gg)
22 Giu 2011 - 00:12:00 (15a 135gg)
It's not accepted, but wouldn't do XXXXX the trick?:
"SELECT 1 FROM `table` WHERE `id`=".XXXX$showX ;
Edited by gizmore:
You are very close.
btw it's XXXXX not XXXXX to XXXX a XXX to an XXX. ;)
The final solution does your idea with just two chars, but with the correct syntax you should already get different messages, saying you are close.
Good Luck!
"SELECT 1 FROM `table` WHERE `id`=".XXXX$showX ;
Edited by gizmore:
You are very close.
btw it's XXXXX not XXXXX to XXXX a XXX to an XXX. ;)
The final solution does your idea with just two chars, but with the correct syntax you should already get different messages, saying you are close.
Good Luck!
Ultima modifica: gizmore - 22 Giu 2011 - 00:16:08
Redknee, quartozane, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 10574 volte.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 10574 volte.