I have tried testing SQL injection using SQLMap using the below query

sqlmap -u http://localhost/abc.php?id=1 -D datab --sql-shell

When i drop into the SQL shell the following command select * from admin works well

But when i try to drop the table or try to insert into table using SQL queries like drop table admin or queries like INSERT * INTO admin

[WARNING] execution of custom SQL queries is only available when stacked queries are supported

  • First off, do you understand what a "stacked query" is? – schroeder Sep 16 '15 at 17:08
  • no i dont understand – Shahrukh Khan Sep 16 '15 at 18:58
  • Ok, then you need to back up a step. Make sure you do a search when you run into an error in a program, and make sure you understand what it is telling you (99% of the time, the error message will tell you exactly what you need to know). Then for this particular problem, do a search now so that you understand what a "stacked query" is and then come back and edit the question with an update. – schroeder Sep 16 '15 at 19:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.