All Questions
4 questions
6votes
1answer
2kviews
PHP SQL Injection Vulnerability In UPDATE Statements
Take the following SQL query as an example: UPDATE `sqlinjection2` SET `$vote`=`$vote`+1 Our goal is to increment the vote count by more than one, in one request. We cannot access the code itself. ...
2votes
2answers
725views
What are the dangers of sql injection with php?
I made an SQL-injectable web-app build to with PHP to get a better understanding of what is going on and automated it all with sqlmap. The relevant code is the following: mysqli_query($conn, SELECT ...
3votes
1answer
2kviews
Using INTO OUTFILE with INSERT
I have some free time so I'm testing various local vulnerable machines. In one particular lab machine, you first have to gain administration panel, and then use the available "insert" command and ...
2votes
3answers
267views
How to validate report given by a white hat hacker
I give a contract to find vulnerabilities in my site to a white hat hacker. According to him he performed several attacks on my site for 15 days and find that there is no any security threats. I am ...