Timeline for SQLi with quote filter?
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 24, 2018 at 15:36 | vote | accept | g0ldrush | ||
| Dec 24, 2018 at 15:36 | |||||
| Dec 24, 2018 at 15:35 | comment | added | g0ldrush | Yes, I tried to close the first quote with \, but after this, I was making a mistake at the password field, so I had unclosed quotes and I was not seeing where was the mistake. By the way, thx for your answer, it made me to focus on where I have to check | |
| Dec 24, 2018 at 6:20 | comment | added | CBHacking | I see Sjeord already went and just handed you the answer, but please tell me you at least tried to follow the instructions, maybe looking up "SQL escape character" if you didn't know what it was or did? I expressly told you how to avoid the extra quote (which, if you followed the steps, would not be unclosed, because one of the four total quotes got escaped) causing a syntax error. | |
| Dec 23, 2018 at 13:27 | comment | added | g0ldrush | But my question is, any text that I put on any of the fields will be moved to the sentence as 'text', so it's necessary to close the ', and if I add a comment without closing the quote, SQL will throw a syntax error, no? I'm a little newby with SQL syntax, so I cannot see how can I close this quoted field :/ | |
| Dec 23, 2018 at 12:50 | history | answered | CBHacking | CC BY-SA 4.0 |