is injection possible here?
Ok please stop deleting my threads without a reason! I was wondering if it's possible to use SQL injection to get into the site without owning an acount. Heres ther source:
<head>
<title>.</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style><!--
.butStyle {font-family: verdana; font-size: 10px; border: 1px outer;}
.button {font-family: verdana; font-size: 10px; border: 1px outer}
td, p {
font-family: verdana;
font-size: 11px;
color:#FAD719;
}
.box {
font-family: verdana;
font-size: 11px;
color:#FAD719;
border: 1px solid #FAD719;
}
BODY {
font-family: verdana;
font-size: 11px;
color:#FAD719;
}
.error {
font-family: verdana;
border: 2px solid #880000;
background-color: #FAD719;
font-size: 20px;
color: #660000;
border-left: 0px;
border-right: 0px;
border-top: 0px;
}
.navBar {
position : relative;
width: 100%;
height: 100%;
overflow : scroll;
}
.title {
font-weight: bold;
color:#003366;
}
a {color:#3333CC;text-decoration:none}
a.menu {color: #3333CC; font-size: 11px; font-weight: bold;}
a.menu:hover {color:#9999FF;}
a:hover {color:#9999FF;}
// -->
</style>
</head>
<body onLoad="document.login.username.focus();" rightmargin="0" leftmargin="0" bgcolor="#6799CA" alt="." topmargin="0">
<br><br><br><br>
<table width="400" align="center">
<tr>
<td class="box"><br><br>
<form name="login" action="index-open.php?PHPSESSID=ba18c84a7c0f2bd44308d049354611fe" method="post"><input type="hidden" name="PHPSESSID" value="ba18c84a7c0f2bd44308d049354611fe" />
<table cellspacing="0" cellpadding="2" align="center" border="0" width="60%">
<tr>
<td colspan="2" align="center"><br><br>
<strong>...</strong>
<br><br></td>
</tr>
<tr>
<td>Username: </td><td><input type="text" name="username" class="butStyle"></td>
</tr>
<tr>
<td>Password: </td><td><input type="password" name="password" class="butStyle"></td>
</tr>
<tr>
<td>
<strong>Remember ? :</strong>:<br></td><td><input type="checkbox" name="remember" value="remember">
</td>
</tr>
<tr>
<td align="right" colspan="2"><input type="submit" name="lsubmit" value="login" class="button"></td>
</tr>
</table>
</form><br>
</td>
</tr>
</table>
<table cellspacing="0" cellpadding="2" align="center">
<tr>
<td>
<br><a href="http://www.pornfridge.com/"><b>PornFridge.com</b></a><br>
<b><a href="mailto:questions@craftytv.com">Questions?</a></b><br><br>
</td>
</tr>
</table>
</body>
</html>
I am new to all this so please help me if you can in any way. If you want I can pm you the site link (not allowed to post) Thanks!
Sleepwalker
Its impossible to know about the type of PHP login by just looking at the page source. Lean more about PHP. If you just give the source of the page and ask everyone to hack it, your thread is gonna be removed. Be patient. DO THE CHALLENGES. READ THE ARTICLES. Use Google. Understand what is SQL injection. Use google. Understand how to check for SQL injections.
Actually, I looked for SQL injection articles and posts here as well, but I could not find any useful ones. HERE is a site I used when I was learning about SQL injection. Maybe it will help you find what you're looking for.