Can you try and SQL inject my account creation page menu

Shout-Out

User Tag List

Results 1 to 9 of 9
  1. #1
    Himynameiseric's Avatar Private
    Reputation
    1
    Join Date
    Sep 2010
    Posts
    3
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Can you try and SQL inject my account creation page

    First of all, I'm pretty pissed off at who deleted my last thread because I CLEARLY want to see if my account creation page is SAFE from hackers who will try and ruin my website when i get popular .......... im not going to wait for it to happen and be like OH WELL.... I SHOULD HAVE DONE THIS BEFORE..... anyways. the link is account.glacialgaming.com

    I want you to try and drop a table .. for example the table "account' and let me know if it worked or not in this thread ---- i have also uploaded a file to the website to let you guys know that i am the owner and im not a noob trying to get people to attack someoenes site.

    OWNER VERIFICATION: account.glacialgaming.com/sql.htm[/url]
    OWNER VERIFICATION: glacialgaming.com/sql.htm[/url]

    EDIT: I even removed the http:// from all links......

    MODS please DONT close this thread.. its crucial to make sure its safe.

    CREATION PAGE URL; ACCOUNT.GLACIALGAMING.COM - Please >.< i need to know before i pay coder
    Last edited by Himynameiseric; 09-30-2010 at 05:54 AM.

    Can you try and SQL inject my account creation page
  2. #2
    Phygar's Avatar ( ͡° ͜ʖ ͡°)
    Reputation
    444
    Join Date
    Nov 2007
    Posts
    1,591
    Thanks G/R
    7/5
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Did it get dropped?
    Last edited by Phygar; 09-30-2010 at 06:00 AM.

  3. #3
    Himynameiseric's Avatar Private
    Reputation
    1
    Join Date
    Sep 2010
    Posts
    3
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Phygar View Post
    Did it get dropped?
    Nope, I see all your queries in the accounts db though, does that mean im save?

  4. #4
    The-Eradicator's Avatar Contributor

    Reputation
    149
    Join Date
    May 2007
    Posts
    829
    Thanks G/R
    0/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Himynameiseric View Post
    Nope, I see all your queries in the accounts db though, does that mean im save?
    It appears it is not secure.

    It's giving me an invalid SQL error when I attempt injection.

    If it were secure it would either make the account, or give me an error saying I can't use those characters.

    EDIT: It appears I crashed MySQL or something. After running a query the website appears to be down. Is Apache/XAMPP running?
    Last edited by The-Eradicator; 09-30-2010 at 09:38 AM.
    The most beautiful thing we can experience is the mysterious. It is the source of all true art and all science. He to whom this emotion is a stranger, who can no longer pause to wonder and stand rapt in awe, is as good as dead: his eyes are closed.
    Albert Einstein

  5. #5
    Himynameiseric's Avatar Private
    Reputation
    1
    Join Date
    Sep 2010
    Posts
    3
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I actually got hacked, all my work deleted off my servers infront of me and i can't access cpanel...... glacialgaming.com.... ill be back April 17 2011 and things will be different.. haters gonna hate

  6. #6
    Phygar's Avatar ( ͡° ͜ʖ ͡°)
    Reputation
    444
    Join Date
    Nov 2007
    Posts
    1,591
    Thanks G/R
    7/5
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by The-Eradicator View Post
    It appears it is not secure.

    It's giving me an invalid SQL error when I attempt injection.

    If it were secure it would either make the account, or give me an error saying I can't use those characters.

    EDIT: It appears I crashed MySQL or something. After running a query the website appears to be down. Is Apache/XAMPP running?
    Well, you're probably getting the error cause you're using single quotes. Were you?

  7. #7
    The-Eradicator's Avatar Contributor

    Reputation
    149
    Join Date
    May 2007
    Posts
    829
    Thanks G/R
    0/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Phygar View Post
    Well, you're probably getting the error cause you're using single quotes. Were you?
    Does that actually make a difference? I'm not particularly strong in SQL.
    The most beautiful thing we can experience is the mysterious. It is the source of all true art and all science. He to whom this emotion is a stranger, who can no longer pause to wonder and stand rapt in awe, is as good as dead: his eyes are closed.
    Albert Einstein

  8. #8
    Phygar's Avatar ( ͡° ͜ʖ ͡°)
    Reputation
    444
    Join Date
    Nov 2007
    Posts
    1,591
    Thanks G/R
    7/5
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by The-Eradicator View Post
    Does that actually make a difference? I'm not particularly strong in SQL.
    Well, you have to use the same one twice. He used double quotes on his site.

  9. #9
    The-Eradicator's Avatar Contributor

    Reputation
    149
    Join Date
    May 2007
    Posts
    829
    Thanks G/R
    0/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Phygar View Post
    Well, you have to use the same one twice. He used double quotes on his site.
    Ah. That's probably why my query failed. How did you know which one he used?

    You just tried that first because of the error?
    The most beautiful thing we can experience is the mysterious. It is the source of all true art and all science. He to whom this emotion is a stranger, who can no longer pause to wonder and stand rapt in awe, is as good as dead: his eyes are closed.
    Albert Einstein

Similar Threads

  1. [How-To] can you necro and hax bot at the same time?
    By forevaplo in forum Pokemon GO Chat
    Replies: 2
    Last Post: 08-10-2016, 03:49 PM
  2. Question - How often can you jump and how far without getting a soft ban?
    By Starburst123 in forum Pokemon GO Hacks|Cheats
    Replies: 0
    Last Post: 07-22-2016, 10:06 AM
  3. Can you still "copy" Heirlooms to another account?
    By crunk001 in forum World of Warcraft General
    Replies: 0
    Last Post: 06-16-2015, 09:46 AM
  4. Replies: 4
    Last Post: 08-19-2012, 09:33 PM
All times are GMT -5. The time now is 07:24 AM. Powered by vBulletin® Version 4.2.3
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Google Authenticator verification provided by Two-Factor Authentication (Free) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search