it executes the code exactly but is still incomplete?

idk [pippayeo]
10 years ago | edited 10 years ago

0

i’ve been messing about with this level a lot and i’ve got a lot of codes that seem to bypass the filter? well i know that they’re not bypassing the filter ‘cos it still says incomplete but the code at the bottom comes out exactly the same as it’s meant to?

<script>alert(‘HackThis!!’);</script>

that’s one of the codes that i tried but no luck. if someone could help me understand why it doesn’t work that’d be great (:

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

0

Please use spoiler tag for your code. Maybe it is not right but it is still a spoiler.
[ spoiler ]Your code goes here![ /spoiler ] (Please remove the spaces between [ and ] )

After submitting your code, a result will show up in the gray box below. Inspect that element and you will know why you did wrong.

![Image](https://www.hackthis.co.uk/user/userbar.png?user=freewind1012%20//%20Navigator)

idk [pippayeo]
10 years ago

0

oops, my bad. i just fixed it now.

and okay, i’ll try that now, thank you!

oxyanon
9 years ago

0

tl0tr
9 years ago

0

@oxyanon : You are over thinking. Keep it simple.

Mugi [Mugiwara27]
9 years ago

0

undetundetectedected

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

KajiMaster
9 years ago | edited 9 years ago

0

I’m in the same boat but with a diffrent attempt.

I just copied the source code and when I put it in it formated just right:

first with no color:
<script>alert(‘HackThis!!’);</script>

2nd exact
<script>alert(‘HackThis!!’);</script>

Suggestions?

hamude
9 years ago

0

what is this

Mugi [Mugiwara27]
9 years ago

0

@KajiMaster : Did you read all of threads on the Forum ?
I don’t think so, there are many hint, the best hint is : undeundetectedtected

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

dloser
9 years ago

0

Shouldn’t you first point out that they are actually trying to do the wrong thing? Execute, not display!