Помогите. Нашел уязвимость, прочитал статтю и захотел проверить сайт. Подставил в параметр \ и мне выдало такое:
SQL Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-35 , 35' at line 16 at /home/www/htdocs/modules/Festival/index.php line 93
Array
(
Код:
=> 1064
[message] => You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-35 , 35' at line 16
[query] =>
SELECT SQL_CALC_FOUND_ROWS
s.sid,
scontent.title as stitle,
scontent.hometext,
s.acomm,
s.comments,
s.counter,
s.time,
e.title,
e.shortdescript
FROM adv_stories s
LEFT JOIN adv_stories_content scontent ON (s.sid = scontent.sid)
LEFT JOIN adv_events e ON (s.eid=e.eid)
WHERE s.eid = '593'
ORDER BY s.time DESC, s.sid DESC
LIMIT -35 , 35
[context] => /home/www/htdocs/modules/Festival/index.php line 93
[time] => 07.02.2015 02:37:02
)
конечно обрадовался. Но, что дальше делать незнаю. Подскажите