Jump to content

CP/CV/SV #EXPOSED V2(The boring technical details)


slushpuppy
 Share

Recommended Posts

And how would you prepare the statements? by using parameters..

 

like so:

 

$query = "

INSERT INTO **********(

user,

pass

) VALUES (

:user,

:pass

)

";

 

And then you use an array to pass the parameters to the values.

 

$query_parameters = array(

':user' => $_GET['user'],

':pass' => $_GET['pass']

);

You don't know what you're talking about lmfao seems like you hired someone from hackforums to help u

Link to comment
Share on other sites

And how would you prepare the statements? by using parameters..

 

like so:

 

$query = "

INSERT INTO **********(

user,

pass

) VALUES (

:user,

:pass

)

";

 

And then you use an array to pass the parameters to the values.

 

$query_parameters = array(

':user' => $_GET['user'],

':pass' => $_GET['pass']

);

 

So why not call it variable queries?

 

And your example code will not run as you will still need to bind the values to the placeholder.

Link to comment
Share on other sites

Why would it be called a variable query.. it's a prepared statement (parameterized query).

 

And ofcourse, I only posted a small snippet of the code used.

 

Prepared statement is still the correct term as it describes the procedure in which the backend parser takes before executing the query, in this case, the parser parses the string before executing it.

 

Paramterized query implies the query must take on input parameters, which is completely not the case as:

 

select * from TABLE;

 

will run accordingly and it doesn't require parameters.

 

Perhaps only on hackforums where PHP guides written by 10 year olds teaches you nonsensical coding & terminology to go with it.

Link to comment
Share on other sites

Correct, however, some people call it parameterized queries, others, prepared statements, it's not a big deal mate.

 

I didn't learn from Hackforums either, rofl.

 

Actually you will find that in the world outside of runescape forum hacking, no1 uses "parameterized queries" in the context you did

Link to comment
Share on other sites

im not sure this is a rat, more of a decoder?

Stfu kid, i love how Dr members come in here and trying to reply. Dr paid money to Parm to hack Lt forums, how sad right sithlord. You cant compete instead you hack forums and still cant do brown sticky stuff.

Link to comment
Share on other sites

Stfu kid, i love how Dr members come in here and trying to reply. Dr paid money to Parm to hack Lt forums, how sad right sithlord. You cant compete instead you hack forums and still cant do brown sticky stuff.

-,0 I forgot we were surrounded by tomatos.... I guess I'm just saying/asking if you didn't log in with a password they cannot hack you correct @@slushpuppy

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...