[TYPO3-english] Show usergroup and fe_user info

bernd wilke t3ng at bernd-wilke.net
Wed Nov 13 08:56:07 CET 2013


Am 12.11.13 18:12, schrieb Miguel:
> I enforced the error and here it is what it shows to me in the browser:
>
> http://s10.postimg.org/o4soesn9l/Capturar.png
>
> Is this good or bad?

Let's see:
SELECT * FROM fe_groups WHERE fe_groups.pid IN (25) AND uid=4AND please 
crash AND fe_groups.deleted=0 AND fe_groups.hidden=0

removing the bad injection:
SELECT * FROM fe_groups WHERE fe_groups.pid IN (25) AND uid=4 AND 
fe_groups.deleted=0 AND fe_groups.hidden=0

what result do you get if you do it in PHPmyAdmin?

I think you will get an empty result as this query selects records  from 
page 25 instead of 26

bernd
-- 
http://www.pi-phi.de/cheatsheet.html


More information about the TYPO3-english mailing list