Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

sql tables


ghost's Avatar
0 0

For the past couple of days I've been working on sql injections, and today I found another vulnerable site. When I put an ' into the url (.php?id=') I got an error that said the following:

MYSQL ERROR —————————————————–– You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''''' at line 2

  query - SELECT categories_id, categories_name, parent_id FROM shop_categories  
                            WHERE categories_id = '''

So my question is, is shop_categories the name of a table that contains the columns named, categories_id, categories_name, and parent_id ?

thanks for any help.


ghost's Avatar
0 0

Thanks for the quick responses.:)