Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to do an sql injection in DVWA with Apache2 and MySQL that would create one more database. This: 2' union select 1,2' create database kala;#-- does not give me any errors but it also does not create the database.

DVWA security setting is set to low.

share|improve this question

closed as not constructive by rook, Adi, AJ Henderson, Iszi, lynks Apr 30 '13 at 16:56

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

First, determine if you can use a 'create' statement in a query like that.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.