PHP with SQL Injection
- by Scott S
For our first assignment in a System Security class, we have to hack into the professors "cheaply organized" sql database. I know the only user is "admin" and the select statement generated in the php is:
select user_id from user where user_username = 'admin' AND user_password = md5('noob')
I am having a number of problems attempting to bypass…