basice web 8

do u need to use the UNION or UNION ALL command for this challenge?

don't know where you got those arguments from, but a simpler way to do this (and almost all SQL injections) is to type in arbitrary code, then look at the error message.

Look thoroughly at the error you get, and think of how you can use that, or modify it to your advantage. ie: to access something you're not supposed to. Ciao!

here are some things i tried:

[edited…]

am i close or anything?

carrico wrote: ?SELECT * FROM family_db

That is the query needed, but you need to find the variable name to put that query in.

please edit this posts

dont be so clear and dont write solutions

?SELECT * FROM family_db

That is the query needed, but you need to find the variable name to put that query in.

"varialbe name" meaning what goes in for the '*'?