[Vince]

Quote:

Originally Posted by VincentDunn I'm not sure how it would be done in a sa-mp server, attackers attack forums usually.

Mostly through login dialog. Most servers use the new DIALOG_STYLE_PASSWORD for that so the characters aren't visible anymore, but still ... Consider this query:

PHP код:

SELECT id FROM playerinfo WHERE name = '%s' AND password = sha1('%s') LIMIT 1; 


If the pass is not escaped, one could possibly input in the dialog box:

Код:

blah') OR TRUE --

which would make the query:

PHP код:

SELECT id FROM playerinfo WHERE name = '%s' AND password = sha1('blah') OR TRUE -- ) LIMIT 1; 


The double dash is the start of a comment in SQL syntax.