mysql injection
#9

Look at that:

"UPDATE `playerdata` SET `admin` = '5', `score` = '90000057', `money` = '3318030', `pKills` = '9000044', `deaths` = '31' , `vip` = '0' , `clanid` = '9939162' , `clanrank` = '5' , `inclan` = '1' , `Bans` = '0',`captured` = '3',`cookies` = '0',`phone` = '0',`Tplayer` = '0',`Hour` = '5',`Min` = '49',`Sec` = '45',`Baccount` = '1317800',`Crowns` = '0',`Totalxp` = '1300',`clanname` = '' WHERE `id` = '1462' LIMIT 1"

It's empty/null. If that happens when you disconnect and you then connect and select the clanname will be empty again. So the problem is in the query.
Reply


Messages In This Thread
mysql injection - by Eth - 21.04.2014, 20:40
Re: mysql injection - by iZN - 21.04.2014, 20:44
Re: mysql injection - by Eth - 22.04.2014, 10:01
Re: mysql injection - by Raza2013 - 22.04.2014, 10:04
Re: mysql injection - by Eth - 22.04.2014, 10:06
Re: mysql injection - by Eth - 22.04.2014, 10:26
Re: mysql injection - by Konstantinos - 22.04.2014, 10:29
Re: mysql injection - by Eth - 22.04.2014, 10:38
Re: mysql injection - by Konstantinos - 22.04.2014, 10:44
Re: mysql injection - by Eth - 22.04.2014, 11:02

Forum Jump:


Users browsing this thread: 2 Guest(s)