Learning about MySQL

Assalam-0-Alaikum,

Now Am Going to complete my series for:

1. Lesson 1 And 2 Intro and type of Vulnerabilities
2. Lesson 3 Learning about My SQL
3. Lesson 4 Expert Learning About MySQL

*************************************786***************************************

Definition of output columns

I do think that many of us just such a page as

_http: / / xxx / news.php? Id = 1

is not satisfied with. So we need to do so on the first request there is no output (up to UNION). The easiest way is to change the "id" with a '1 'to' -1 '(or to '9999999')

_http: / / xxx / news.php? id =- 1 'UNION SELECT 1,2,3,4,5,6-

Now we have something where the page should be displayed any of these figures. (For example as it is conventionally script news in the "Name news" you will see say 3, "News" -4 well, etc.). Now that we have some information which we need to replace these figures in obrashenie to the script we need to function. If the numbers do not show up anywhere that the other subparagraphs of paragraph 2.1 will be skipped.

SQL Injection Cross Site Scripting

Example:

_http: / / xxx / news.php? id =- 1 'UNION SELECT 1,2,3,'

Rest Of will be Shown in the next series .


Regards,
Zulqurnain jutt