-
LOS darkelfWebHacking/Load Of Sql Injection 2018. 2. 13. 19:3312345678910111213<?phpinclude "./config.php";login_chk();dbconnect();if(preg_match('/prob|_|\.|\(\)/i', $_GET[pw])) exit("No Hack ~_~");if(preg_match('/or|and/i', $_GET[pw])) exit("HeHe");$query = "select id from prob_darkelf where id='guest' and pw='{$_GET[pw]}'";echo "<hr>query : <strong>{$query}</strong><hr><br>";$result = @mysql_fetch_array(mysql_query($query));if($result['id']) echo "<h2>Hello {$result[id]}</h2>";if($result['id'] == 'admin') solve("darkelf");highlight_file(__FILE__);?>
cs C언어를 써봤으면 풀수있는 문제다.
||, && ..
'WebHacking > Load Of Sql Injection' 카테고리의 다른 글
LOS troll (0) 2018.02.13 LOS orge (0) 2018.02.13 LOS wolfman (0) 2018.02.13 LOS orc (0) 2018.02.13 LOS goblin (0) 2018.02.13