How do I test for SQL Injection

[Max Taxable]

He posted two, complete queries. Looks like you posted only part of the first one.

The queries are:

SELECT title, phpcode, hookname, product FROM plugin WHERE phpcode LIKE '%base64%' OR phpcode LIKE '%exec%' OR phpcode LIKE '%system%' OR phpcode like '%pass_thru%' OR phpcode like '%iframe%';

And:

SELECT styleid, title, template FROM template WHERE template LIKE '%base64%' OR template LIKE '%exec%' OR template LIKE '%system%' OR template like '%pass_thru%' OR template like '%iframe%';

Try them one at a time.

[Scalemotorcars]

Tried that also. Im the super admin so thats not it. aLSO TRIED IN THE sql OF PHPMyAdmin. Same result

This is the complete error I get trying either one.

An error occurred while attempting to execute your query. The following information was returned. 
error number: 1146 
error desc: Table 'REDACTED_forum.plugin' doesn't exist

An error occurred while attempting to execute your query. The following information was returned. 
error number: 1146 
error desc: Table 'REDACTED_forum.template' doesn't exist

And thanks for the help I really appreciate it.

[Max Taxable]

error desc: Table 'p16t2ugb_forum.plugin' doesn't exist

I have no idea at all why it's trying to query that table, it's not called for in either query.

Need the guy who posted the queries to chime in, I may be mistaken what exactly it is he posted there. LOOKS like queries, might not be though.

Sorry i haven't been able to help you so far.

[Scalemotorcars]

Ok I added my prefix to the query and it worked. I got 3 pages of results just for the Plugin query.

Now what?

[Max Taxable]

Originally Posted by Scalemotorcars

Ok I added my prefix to the query and it worked. I got 3 pages of results just for the Plugin query.

Now what?

No idea. Can't be good though.

snakes was online today, maybe he will chime in.

[Scalemotorcars]

So like I said I got the plugin query to work and got 42 results. (cant get the template one to work)

Anway

Maybe reinstall the plugins affected with overwriting enabled. That would change the code but not sure about the DB.

Thanks again.
Daniel

[snakes1100]

Well the 2 queries i gave you just pull the data from those tables, the results you can match to a default/clean install on a dev site for example.

[Scalemotorcars]

Now if I only had a dev site.

[snakes1100]

Those queries will only show you results that contain the keywords outlined base64 etc

[Brandon Sheley]

Originally Posted by Scalemotorcars

Ok I added my prefix to the query and it worked. I got 3 pages of results just for the Plugin query.

Now what?

You can try searching one at a time

SELECT title, phpcode, hookname, product FROM plugin WHERE phpcode LIKE '%base64%';

SELECT title, phpcode, hookname, product FROM plugin WHERE phpcode LIKE '%iframe%';

What do you see with just this part of the command?
Any odd plugins that you don't remember adding?
A screenshot would help us, but really if your site was compromised, it's wise to have someone who knows what they're doing on board.