nyteblade=> i am having the exact same problem. ill xfer the money, and then when i try to clear the logfiles it says i havent xfered the money, even though i have the cookie that says i had...

will it be back up soon?

Yeah I am at that exact same spot. I've used javascript injection to change the username, then cleared the personal files (which came back with files cleared) and ive changed the value=(username)SQLFiles to his account, which also came back with files cleared, but still no mission complete edit: 3. ...

hmm that would have worked too haha. thanks. i was just making it more confusing for myself

Nyteblade wrote:Have you gotten the list of all the users yet?

No, that's what I am trying to do...I thought using the SQL Injection was going to get me that...?

i have tried a whole bunch of stuff related to
SELECT * FROM 'users' WHERE Username= "hunter"

and then changing a few of the variables to see what happens, and whenever i enter it i usually get 'Username is too long'.
im guessing that my syntax is wrong >.<

This is pushing it. I'm hesitant to give this much, but these websites may be of some help. If you encounter a problem, the best way in these practice 'sites' is to try it and find out. http://ocliteracy.com/techtips/sql-injection.html http://www.securiteam.com/securityreviews/5DP0N1P76E.html -Both...

where do you inject the SQL, in url or in the Username: field? any help would be appreciated!

is this challenge down because where images are supposed to load, it just states: The specified file does not exist.