I'm on a website which have a program, there is a search input for keywords.
When I input
> and search, it returns
Got error 'empty (sub)expression' from regexp error and when I input
.* I get all keywords at once, which seem like its relying on
REGEXP function from MySQL to match.
Ok, so I have tried
aaaaaaa' OR SLEEP(999) -- - but output was:
Unfortunately! aaaaaaa\' OR SLEEP(9999) -- - is out of stock
' is getting escaped and becomes
\', then I tried with
\' to see if only
' is getting escaped, but it seems that both of them gets escaped:
Unfortunately! aaaaaaa\\' OR SLEEP(9999) -- - is out of stock
3 \ not 2 like in blockquote
I've also tried url encoding and I got same output.
By the way the app is using PHP and MySQL