[Wolves] PHP Sql select losing a row

David Goodwin david at codepoets.co.uk
Tue Jul 16 09:20:53 UTC 2013


> If $postcodevoid where to be something like: 
> 
>   '; DROP TABLE property; --
> 

<pedantic point>
I don't think that'll work in MySQL, as execution stops at  the first ";"
In PostgreSQL it definitely would cause problems.
Most SQL Injection attacks for MySQL use union joins to add additional data in I believe.
For further "reading" investigate wapiti and sqlmap.
</pedantic point>


> Your going to have a bad day.

<really pedantic and probably annoying>
You are = You're.
Ownership of a thing = Your
</really pedantic ...>


David.


More information about the Wolves mailing list