ShadowDance

roam's console wrote:Script started on Fri Jun 13 23:08:38 2008
Setting up interactive shell params..
[roam@straylight ~]$ mysql
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 38
Server version: 5.0.51a FreeBSD port: mysql-server-5.0.51a

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

Spoiler: show

The MySQL server wrote:mysql> \s
--------------
mysql Ver 14.12 Distrib 5.0.51a, for portbld-freebsd6.3 (i386) using 5.2

Connection id: 38
Current database:
Current user: root@localhost
SSL: Not in use
Current pager: /usr/bin/less
Using outfile: ''
Using delimiter: ;
Server version: 5.0.51a FreeBSD port: mysql-server-5.0.51a
Protocol version: 10
Connection: Localhost via UNIX socket
Server characterset: cp1251
Db characterset: cp1251
Client characterset: cp1251
Conn. characterset: cp1251
UNIX socket: /tmp/mysql.sock
Uptime: 11 hours 52 min 46 sec

Threads: 1 Questions: 190 Slow queries: 0 Opens: 6 Flush tables: 1 Open tables: 5 Queries per second avg: 0.004
--------------

The MySQL server wrote:mysql> SHOW GRANTS FOR 'testowa'@'%';
+-------------------------------------------------------------------------------------------------------------------------------------------------+
| Grants for testowa@% |
+-------------------------------------------------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'testowa'@'%' IDENTIFIED BY PASSWORD '18a2f9611fa3f604' |
| GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES ON `vily`.* TO 'testowa'@'%' |
+-------------------------------------------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)

Spoiler: show

The MySQL server wrote:mysql> SELECT * FROM mysql.user WHERE user = 'testowa';
+------+---------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+
| Host | User | Password | Select_priv | Insert_priv | Update_priv | Delete_priv | Create_priv | Drop_priv | Reload_priv | Shutdown_priv | Process_priv | File_priv | Grant_priv | References_priv | Index_priv | Alter_priv | Show_db_priv | Super_priv | Create_tmp_table_priv | Lock_tables_priv | Execute_priv | Repl_slave_priv | Repl_client_priv | ssl_type | ssl_cipher | x509_issuer | x509_subject | max_questions | max_updates | max_connections |
+------+---------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+
| % | testowa | 18a2f9611fa3f604 | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | | | | | 0 | 0 | 0 |
+------+---------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+
1 row in set (0.00 sec)

The MySQL server wrote:mysql> SELECT Host, User FROM mysql.user WHERE User = 'testowa';
+------+---------+
| Host | User |
+------+---------+
| % | testowa |
+------+---------+
1 row in set (0.00 sec)

mysql> SELECT Host = '%', User FROM mysql.user WHERE User = 'testowa';
+------------+---------+
| Host = '%' | User |
+------------+---------+
| 1 | testowa |
+------------+---------+
1 row in set (0.00 sec)

The MySQL server wrote:mysql> SELECT Host = '%', User FROM mysql.user WHERE User = 'testowa' AND Host = '%';
Empty set (0.00 sec)

The MySQL server wrote:mysql> SET PASSWORD FOR 'testowa'@'%' = PASSWORD('foo');
ERROR 1133 (42000): Can't find any matching row in the user table

ERROR:
SQL: SELECT COUNT(*) AS cnt FROM book_comments WHERE name = 'Daniel' AND city = 'София' AND email = '' AND comment = 'Не знам Бароу дали обича константата на финната структутра или просто и го казва за да я вкара в кревата, но цикли основно за нея през цялата книга. Както и за антропния прицип. Интересна е несъмнено, но като цяло новата информация в нея е малко, но е по-сложна от entry level книга. Цели се в някаква много странна ниша от читатели.' AND errors = '
допуска се само текст на кирилица!' AND dateposted = '2008-06-18' AND bid = '1086' AND approved = 'Y'
Unknown column 'errors' in 'where clause'

Roamer wrote:Е, сега, това не ми прилича на SQL injection По-скоро е просто неправилно протекъл процес на обновяване на работещо приложение - "дай новия сорс... мдам, дай новия сорс... мдам, и тука новия сорс... ааааа, ма то и промени в базата ли имало?! Уф, добре че са тия клиенти, че да ни подсетят!"

(мдам, усмивката е крива, защото горното е донякъде от личен опит )

thunder wrote:Термита да постне какво е открил в проекта си днес

inspire-нат от него аз се поразрових из нашия днес и на 4 места открих код от вида:

Code: Select all

if (блахблах > нещоси) {

направи нещо

} else {

направи същото нещо от if частта

}

при един от случаите имаше коментар: "do not use else if in this method if you value your life"