Challenge 2


aivilo
Member
Registered: 08.11.13 01:51
Timezone: UTC +0
Posts: 3

Can someone give me a hint on challenge 2? I've been stuck on it for quite a while now. I've tried

Admin'" );--
' O/**/R 1=1 LIM/**/IT 1" );--
' OORR 1=1 LIMORIT 1" );--

But none works.

Any help is appreciated!


aivilo
Member
Registered: 08.11.13 01:51
Timezone: UTC +0
Posts: 3

Can someone give me a hint on challenge 2? I've been stuck on it for quite a while now. I've tried

Admin'" );--
' O/**/R 1=1 LIM/**/IT 1" );--
' OORR 1=1 LIMORIT 1" );--

But none works.

Any help is appreciated!


ynori7
Administrator
Registered: 24.08.11 12:16
Timezone: UTC +2
Posts: 144

Well your first try is on the right track, but you've overcomplicated it a bit. Try simplifying it a bit.

i537.photobucket.com/albums/ff338/ynori77/archenemysig1.jpg


ynori7
Administrator
Registered: 24.08.11 12:16
Timezone: UTC +2
Posts: 144

Well your first try is on the right track, but you've overcomplicated it a bit. Try simplifying it a bit.

i537.photobucket.com/albums/ff338/ynori77/archenemysig1.jpg


aivilo
Member
Registered: 08.11.13 01:51
Timezone: UTC +0
Posts: 3

Thanks, I got it.

Can you explain to me why Admin' " );-- wouldn't work?
I thought the ' " and ) were needed to prevent a syntax error.


aivilo
Member
Registered: 08.11.13 01:51
Timezone: UTC +0
Posts: 3

Thanks, I got it.

Can you explain to me why Admin' " );-- wouldn't work?
I thought the ' " and ) were needed to prevent a syntax error.


ynori7
Administrator
Registered: 24.08.11 12:16
Timezone: UTC +2
Posts: 144

Sounds like you were trying to close the PHP function, and it doesn't work that way. You're just making a SQL injection.

i537.photobucket.com/albums/ff338/ynori77/archenemysig1.jpg


ynori7
Administrator
Registered: 24.08.11 12:16
Timezone: UTC +2
Posts: 144

Sounds like you were trying to close the PHP function, and it doesn't work that way. You're just making a SQL injection.

i537.photobucket.com/albums/ff338/ynori77/archenemysig1.jpg


aivilo
Member
Registered: 08.11.13 01:51
Timezone: UTC +0
Posts: 3

I see, so my input always gets ended at the " ?


aivilo
Member
Registered: 08.11.13 01:51
Timezone: UTC +0
Posts: 3

I see, so my input always gets ended at the " ?