SQL Injection

.secret.

One of the major problems with SQL is its poor security issues surrounding is the login and url strings.ow.

hmmmZ,This is the easiest part…very simple On the login page just enter something like thiZ.

want mORe .ow.

darshana', or 'a'='a'–darshana', OR '1'>'0'#

SQL Injection is a trick to inject SQL query/command as an input possibly via web pages. Many web pages take parameters from web user, and make SQL query to the database. Take for instance when a user login, web page that user name and password and make SQL query to the database to check if a user has valid name and password. With SQL Injection, it is possible for us to send crafted user name and/or password field that will change the SQL query and thus grant us something else

hmmmZ. But why \ or 1=1. Ok ok. Menna mekai wenne oken

SELECT * **** product // PCategory=\ food\ or 1=1--\

darshana\ , or\ a\ =\ a\ –darshana\ , OR \ 1\ >\ 0\ # .hmm

.think2..dntknw.

The query now should now select everything from the product table regardless if PCategory is equal to \ food\ or not. A double dash \"--\" tell MS SQL server ignore the rest of the query, which will get rid of the last hanging single quote (\ ). Sometimes, it may be possible to replace double dash with single hash \"#\".

sql query c0des SinhaWAP eke wada na. So meke p0st karanna ba oyalata

man dipu c0de eken m0nada karanna puluwan ?. Ok . Api wap site ganam katha karamuko.

\ or \ a\ =\ a The SQL query will now become: SELECT * **** product // PCategory=\ food\ or \ a\ =\ a\

wena awae wada atina test karan na ona .ow.

wap site wala single md5(*) tiyana onama thanak ign0re karana puluwani meken. Like staff l0gin pazw0rdz, staff panel pazw0rdz.secret.

and post ekak,gb sign,pm wage ewadi username eka hide karanna puluwani meken.ow.

damu balanna c0mment ekak. Wade h0danam thawath supiri c0dz danawa.ow.

wade hodae ath thama .dntkn.

Mu m0naa qawanawada manda.dntknw.

ignore in *drop*,*delete* , . . . Rename tables , . .using speacail chars. . , . Bla bla a A a. . , ,

Hmm SQLI Nam Gemak Naha .ow.

.wakwak.

blaablaablaaa blaaablaa blaaablaaaa.heheb. S Q L Injecting monaada.lol.p.s. Edited by MudiTHaCooL

injection nam gemak aththema na .ow..

injection nam gemak aththema na .ow..