Basic 18 what am i doing wrong

Ive read the tutorials on SQL injection on this site and other places.
Once I use the OR**R B* command and see the article shouldnt I be able to use a UNION ALL SELECT 5 from ******** command?

Ive also tried replacing the 5 with n**l…

It looks like you are 90% of the way there. Now that you've determined how many columns there are, try to display them all on the same page(instead of just the last one.)

There was a very similar thread on this several years ago

https://www.hellboundhackers.org/forum/basic_18-7-15999_0.html

If you still can't seem to figure out the exact statement required, PM me.

Close man but no cigar.

Normally your injection would produce an error like this:

The used SELECT statements have a different number of columns

That's because UNION and UNION ALL require that all the queries being UNIONed have the same number of columns in the SELECT clause.

You already know the correct number of columns, but you are only including the last one.

Thanks for the hints I ended up getting it due to your guys advice and this article:

http://www.thisislegal.com/tutorials/3 Really good article IMO