vb.org Archive - Security question - database query related

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)

- - Security question - database query related (https://vborg.vbsupport.ru/showthread.php?t=310767)

Macsee

04-24-2014 06:33 PM

Security question - database query related

This thread suggests the following query to find base64 in the database:

Quote:

SELECT styleid, title, template FROM template WHERE template LIKE '%base64%' OR template LIKE '%exec%' OR template LIKE '%system%' OR template like '%pass_thru%' OR template like '%iframe%';

However, I get errors when I run it

My tables all have a prefix of st1 in the table name. Could anyone please tell me the syntax for the query. I tried the following but it didn't work.

Quote:

SELECT styleid, title, st1template FROM st1template WHERE st1template LIKE '%base64%' OR st1template LIKE '%exec%' OR st1template LIKE '%system%' OR st1template like '%pass_thru%' OR st1template like '%iframe%';

Similarly I would like to run the other query in that thread which is also one I'd need to change:

Quote:

SELECT title, phpcode, hookname, product FROM plugin WHERE phpcode LIKE '%base64%' OR phpcode LIKE '%exec%' OR phpcode LIKE '%system%' OR phpcode like '%pass_thru%' OR phpcode like '%iframe%';

Thanks.

kh99	04-24-2014 07:08 PM

You should only need to add your prefix to the table name, the one right after FROM. So the first one should be:

Quote:

SELECT styleid, title, template FROM s1template WHERE template LIKE '%base64%' OR template LIKE '%exec%' OR template LIKE '%system%' OR template like '%pass_thru%' OR template like '%iframe%';

All times are GMT. The time now is 02:26 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01558 seconds Memory Usage 1,712KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (4)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (2)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: