by romainfox on Mon Apr 18, 2011 3:49 pm ([msg=56428]see Re: Please ask questions ONLY in this topic.[/msg])
You just need to log in as a known username, think where you can find usernames. Then you have to log in as this username and using a SQL injection to ignore the password field (but it can't be empty).
So how can you ignore this field ? Have to make the condition "true".
by Vriska-Serket on Tue Apr 19, 2011 5:41 pm ([msg=56477]see Re: Please ask questions ONLY in this topic.[/msg])
Got it. I wasn't taking advantage of the OR command effectively, and I thought the name of the database was 'members' . This link was vital for me to fully understand what needed to be done - I highly recommend it to those who are stuck: http://st-curriculum.oracle.com/tutoria ... /index.htm
To romainfox and fashizzlepop, major thanks for helping me out. You guys are awesome. =D