SQL Injections

boing! bump up!

IT`S JUST ONLY STOP THE SQL :) so.... bad luck :))

RO: bwahahhahaha.
Ma sparg de ras! Oricum, ai inceput bine treaba! Vezi ca mai sunt si alte chestii de acoperit, nu doar panaramele de muweburi facute de =Master=... spre ex: in mu web 0.7 sau 0.8 poti teleporta pe cine vrei si unde vrei cu doar 2 clicuri :)
In rest, ca sa nu fie panica prea mare... mai bine va configurati singuri un server apache + php, nu folositi XAMPP, de ce? other sql injections!


EN: Good job! keep up the good work. Remember, always wash your hands and use custom made sites, not mu web and related crap.


I hack for fun, you?

Quote:

---

Oky i made a littel test for your sql!
How is work?
Simple!
Go to web page => Register new Account => Add account info!
BUT! BUT in e-mail add this code:

Code:

---

'';shutdown;--

---

Then click: Create New Account!
If your web is not secured in 5---10 seconds your SQL will sleep!SQL SHOTDOWN!
Or you can do same sh*t to: web page =>Lost Password=> Add account info! in e-mail add this code:

Code:

---

'';shutdown;--

---

---

Sorry mate,but in MSSQL 2005 it`s

Code:

---

;shutdown;--

---

,and not

Code:

---

'';shutdown;--

---

,and it really works if you insert this in the "Change Password" section,if there is any...(you have to be logged on)

Really nice guide.