Dfury17 wrote:Hi Everyone, first post for me, i've been playing around for two days on this website and i've learned so much, but now i'm really stuck with this think, i red every post, every tutorial posted (as my mind could sustain) for 2 hours and half but i'm still stuck in this... i think that i'm very close to get the email address, my injection contains all the commands listed in the replies, i'm getting really nervous and i woud apreciate if someone could control the syntax of my injection, i really don't know where i'm doing mistake, I also know the right number of column.
.php?category=1 S***** *, n***, n***, n*** F*** e**** U**** A** S***** F*** p*******
tammai wrote:I can't send email list . The HTS Messages Center said: "Your response did not generate a victory condition for the challenge. Please try again!", PHPBB said: "You are not authorised to send private messages.". Anyone give me a hint?
krystah wrote:1. We are performing a query using the U**** A** command, even though we're only after information from the e**** table. Is this only necessary because the query already contains a request from another table (i.e. the "category=2" part)?
krystah wrote:2. We have to find out the number of columns from the unknown table in order to successfully produce a result-set using U**** A**. How am I supposed to find out information about the unknown table, in this case, the number of columns? This brings me to my next and last question:
krystah wrote:3. I have heard people speaking of a "trick" of sorts, which involves using "ORDER BY" to find out the number of columns from a table. A person told us to "increment until it falls off". This was very unclear to me, as in my previous experiences with RDBMS, we have been taught that when you use ORDER BY it goes something like the following example.
SELECT name, age, height FROM persons ORDER BY age
ORDER BY takes a column-name and sorts the result-set according to it. Is it possible to tell ORDER BY to sort after a specific column-number? I.e
SELECT name, age, height FROM persons ORDER BY col2
If so, then yes, I could see how it is possible to increment the column-number until it no longer produces any result. But is this possible? I have never seen it, and it is not documented at W3Schools. If not, can someone please assist me in understanding this?
krystah wrote:Sorry for the lengthy post and thanks in advance.
Users browsing this forum: No registered users and 0 guests