Think Very Carefully About What the SQL Commands are Doing

[Karate-Boy]

I can't find the place where u can post for Realistic Mission 4, so I've post it here.

I know that I must receive some e-mails, but can anyone help me with that?
Must I use a UNIX command or anything? Please help me!!

[TheMindRapist]

Try finding out where the emails are stored...

[Karate-Boy]

If I put my real e-mail into the box, I see this message:
"Error inserting into table "email"! ..."
So are the e-mails stored in a table?

[novalyphe]

Try looking up SQL injection.

[purple_pixie]

If I put my real e-mail into the box, I see this message:
"Error inserting into table "email"! ..."
So are the e-mails stored in a table?

Jeez. Yes, yes they are.

But you want to *access* the emails, not insert into them.

So now that you know the table name, find something that *selects* from the database ...

[Karate-Boy]

... find something that *selects* from the database ...

Yeah..I'm trying some SQL injectons with SELECT

[purple_pixie]

On the "add email" page ... well "good luck" is all I'm saying.

[novalyphe]

What's the difference between "get" and "post" methods in HTML forms? and which is used on the site?

If you know it might help you figure out where you need to put your SQL injection.

[Karate-Boy]

Can anyone give me a hint about that SQL injection?

[c24lightning]

Can anyone give me a hint about that SQL injection?

SELECT * FROM...

That's pretty much all I can say.. But find out more about those injections.