Sql Inject

testing935
6 years ago

0

Hi guy,
I have a challenge on sql injection
And when I run> UNION SELECT pseudo, password FROM admins WHERE pseudo = ‘OR 1 = 1 # AND password =’ OR ‘’ =

This displays:
Warning: SQLite3 :: query (): Unable to prepare statement: 1, unrecognized token: “#” in /challenge/web-server/ch9/index.php on line 38 unrecognized token: “#”

Can you explain to me the error quickly because I did not understand

1reply
2voices
2,638views
SIGKILL [r4v463]
6 years ago

1

An SQL comment is double dash (–).

You must be logged in to reply to this discussion. Login
1 of 2

This site only uses cookies that are essential for the functionality of this website. Cookies are not used for tracking or marketing purposes.

By using our site, you acknowledge that you have read and understand our Privacy Policy, and Terms of Service.

Dismiss