LOS Lv.32 alien (풀이 봄..)
alien query : select id from prob_alien where no= query2 : select id from prob_alien where no='' <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/admin...
alien query : select id from prob_alien where no= query2 : select id from prob_alien where no='' <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/admin...
zombie query : select pw from prob_zombie where pw='' <?php include "./config.php"; login_chk(); $db = dbconnect("zombie"); if(preg_match('/rollup|join|ace|@/i', $_GET['pw'])) exit(...
ouroboros query : select pw from prob_ouroboros where pw='' <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/prob|_|\.|rollup|join|@/i', $_GET['pw'])) e...
phantom ip email 127.0.0.1 ************** <?php include "./config.php"; login_chk(); $db = dbconnect("phantom"); if($_GET['joinmail']){ if(preg_match('/duplicate/i', $_GET['join...
frankenstein query : select id,pw from prob_frankenstein where id='frankenstein' and pw='' <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/prob|_|\.|\(|\)|...
blue_dragon query : select id from prob_blue_dragon where id='' and pw='' <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/prob|_|\./i', $_GET[id])) exit("N...
red_dragon query : select id from prob_red_dragon where id='' and no=1 <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/prob|_|\./i', $_GET['id'])) exit...
green_dragon query : select id,pw from prob_green_dragon where id='' and pw='' <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/prob|_|\.|\'|\"/i', $_GET[id...
evil_wizard query : select id,email,score from prob_evil_wizard where 1 order by <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/prob|_|\.|proc|union|sleep|...
hellfire id email score query : select id,email,score from prob_hell_fire where 1 order by <?php include "./config.php"; login_chk(); $db = dbconnect(); if(preg_match('/prob|_|\.|proc|un...