Home/ Questions/Q 9054481
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-16T13:42:05+00:00

Possible Duplicate: MySQL Injection – Use SELECT query to UPDATE/DELETE So I have found

  • 0

Possible Duplicate:
MySQL Injection – Use SELECT query to UPDATE/DELETE

So I have found in my site bug that allows to perform sql injection
http://mysite.com/script.php?id=1 union select 1,2,3 will output all fields that has Id property equal to one plus one additional row with 1,2,3. I know that I have to validate user input to close my bug.

However my question is quite another. Is it possible to perform update query or insert query? I am able to comment query using –, however I cannot use multiple statements that are delimited by ;. So is it possible to perform update query in my case. I can show PHP code and SQL query if needed.

$sql    = "SELECT id, title, text from table where cId=$val";
$result = mysql_query($sql);
$array  = mysql_fetch_array($result);
//echo rows in table
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Judging from MySQL Injection – Use SELECT query to UPDATE/DELETE
    all that is protecting you is a limitation of mysql_query. I would not rely on this, and in particular not that it remains this way over time. You should never rely on a feature to be disabled by default. Maybe the next version already allows statements such as.

    SELECT id, title, text from table where cId=1; DROP table table
    • 0