| guesty |
| Beginner |
 |
|
| Joined: May 17, 2004 |
| Posts: 3 |
|
|
|
 |
|
 |
|
When SQL inj. is available and UNION works, what options do I have? I mean, only SELECT after union? Because I tried UPDATE, DELETE and nothing worked.
| Code: | $result=$db->sql_query("
SELECT lid, url, title, description, date, hits, downloadratingsummary, totalvotes,
totalcomments, filesize, version, homepage
FROM ".$prefix."_downloads_downloads
WHERE sid=$sid
order by $orderby
limit $min,$perpage
"); |
 And here for example. After pasting UNION... 0,0,some_var... could you explain, how these variables are being assigned to the vars from first SELECT? Because I don't quite understand this. |
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 1775
Members: 0
Total: 1775
