I am learning web development and at the same time I want to learn web hacking in order to better protect my websites in the future. Now I learning SQL injection and I am hacking into a hackme domain. Even though it is vulnerable, when I run this order by query:
http://www.hackmedomain.gr/news.php?id=4842 order by '1000'
I get this result:
Query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1000''' at line 1
If I use
order by 1 I get the same thing. What I am doing wrong?