Hello I have been trying to complete this challenge and am pretty sure I know exactly what's going on.
1. I type my SQL statement inside the "Poke" textbox, UPDATE Users SET username="test", password="test";
essentially this should update all of the username and password fields in the SQLite Database before i authenticate.
however the same error message keeps on popping up 'You do not have sufficient privileges to see this information.'
Is everything working properly for Challenge 1? Also what am i doing wrong? Any hints would be appreciated.
It sounds like you're forgetting that the value from the Poke textbox is being use in a SQL statement already, so you need to figure out how to terminate that statement and inject your own.
Also, you should consider the case where the User database is empty, so there is nothing to update.