I tried guessing a few column names from the admin table, but I got no luck....I counted the columns, there's 81, and I can't be fucked to get the column names letter by letter for the whole site.
So here's my syntax, it blocks table_name, if I can get around it, it would save me about 10 hours of time lol.
Here's my syntax, I tried a few commenting and a few other things, no luck.
So here's my syntax, it blocks table_name, if I can get around it, it would save me about 10 hours of time lol.
Here's my syntax, I tried a few commenting and a few other things, no luck.
Code:
www.natalpress.com.br/humor.php?id=7775+and+ascii(substring((select concat(column_name)+from+information_schema.columns+where+table_name=0x61646d696 e+limit+0,1),1,1))>0![[Image: downfallsignature.png]](http://i346.photobucket.com/albums/p427/heresxidamieni/downfallsignature.png)
Categories:
sql injection
