Please ask questions ONLY in this topic.

[fashizzlepop]

Go ahead and PM me too. I don't trust msbachman anymore.

[Monica]

So I finished the mission, trouble is, I finished it without understanding what I did. I'm deathly afraid to spoil this and look like a total ass so is it possible for anyone to PM so I can explain?

You're going to be upset that I am telling you that you may have cheated or used a Harry Potter spell on the interwebs to retrieve the answer to this mission. This would make me upset. However, because you have no understanding of how you completed the mission, you are more upset.

[msbachman]

I don't trust msbachman anymore.

WTF fashizzle i thought we were best buddies!

-- Mon Dec 06, 2010 6:06 pm --

Oh yeah Monica he just asked for clarification on why it worked.

[fashizzlepop]

I don't trust msbachman anymore.

WTF fashizzle i thought we were best buddies!

I forgive you. That little debate between you and Thetan made you start off looking like an idion\t, but you finished him off IMO. I Declare you WIN.

[Monica]

Anyone who goes off topic beyond this post will be warned, and you will be very upset.

[Coltragon]

Man, i do understand how SQL Injection works(well i think i do).

Username i enter: blablabal
Password i enter this: x'; SELECT password FROM users WHERE username='WhiteKing';--

It's not returning me any errors, that means the column password exists in the table users for username WhiteKing. But than why isn't it giving me password?

[mShred]

The sql command for this one is a lot simpler than that. Try going back to the very first things you read about sql or the very first commands you learned.

[Coltragon]

SELECT is the first SQL command i've ever learned. Can i get a hint?

Also tried inserting a new account into the database, but for somewhat reason that didn't work either.

[mShred]

SELECT is the first SQL command i've ever learned. Can i get a hint?

Also tried inserting a new account into the database, but for somewhat reason that didn't work either.

Here just PM me and i'll give you some more help.

[bandchicky314]

Ok since I had a MAJOR blonde moment when doing this, when you find the SQL "thing" (I'm trying to censor myself and not spoil anything) make sure to use the WHOLE thing. Everything that you find, you should put in in it's entiretity. If I would have done that to begin with then I would have solved this in 5 minutes instead of 30.