Challenge 1


Joseph94m
Member
Registered: 15.01.17 11:26
Timezone: UTC +2
Posts: 2

In which part of the write statement that is happening during the poke does the input of "Poke User" get used? I am assuming that the code is somewhat like:
UPDATE Users
SET column1 = value1, column2 = value2....
WHERE User=<<input of Poke User>>;

So I am trying to write something like:

Admin'; INSERT INTO Users VALUES('test','pswd' ) ; --

Am i thinking correctly ?

Thanks.


Joseph94m
Member
Registered: 15.01.17 11:26
Timezone: UTC +2
Posts: 2

I figured it out, the number of fields isn't just 2 smile