takn25 Posted March 19, 2011 Share Posted March 19, 2011 Hi I havent used mysql_real_escape_string currently. I am trying to login with the SQL injection trick username = ' ' OR 1 password = ' ' OR 1 It doesnt seem to do anything could some one tell me what can I enter to login with out entering valid details from my database. I want to learn this so i can prevent and test if everything is going as planned. Quote Link to comment Share on other sites More sharing options...
The Little Guy Posted March 19, 2011 Share Posted March 19, 2011 Try this for the user name and password: ' or 1=1-- Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.