Sql Inject

testing935
7 years ago

0

Hi guy,
I have a challenge on sql injection
And when I run> UNION SELECT pseudo, password FROM admins WHERE pseudo = ‘OR 1 = 1 # AND password =’ OR ‘’ =

This displays:
Warning: SQLite3 :: query (): Unable to prepare statement: 1, unrecognized token: “#” in /challenge/web-server/ch9/index.php on line 38 unrecognized token: “#”

Can you explain to me the error quickly because I did not understand

Add me on hackthis

Or speak with me on IRC channel : https://www.hackthis.co.uk/irc/

Try to Ddos me, My ip : 127.0.0.1

1reply

2voices

2,840views

SIGKILL [r4v463]
7 years ago

1

An SQL comment is double dash (–).

You must be logged in to reply to this discussion. Login