Hack Forums
Hi can we overwrite data or insert data using SQLI? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Hi can we overwrite data or insert data using SQLI? (/showthread.php?tid=2519509)



Hi can we overwrite data or insert data using SQLI? - fred93 - May 23, 2012

It just came in my mind that can we insert data using Insert into query??

or can we overwrite data from columns?? many websites have their large texts in columns... as i m a nooob.. plzz let me knw if this is possible :)

Thank you


* - Phizo - May 23, 2012

If you wish to insert data into a table with new values I believe the query would be like so:

INSERT INTO table_name (column_name1, column_name2, column_name3) VALUES (value1, value2, value3)

If you wish the insert data into a table by overwriting existing data then I believe the query would be like so:

UPDATE table_name SET column_name='new_value' WHERE column_name='old_value'


* - torque59 - May 23, 2012

you can insert files into the database which can accessed

For that to be possible the file_priv command should work

You could also shell sites if the friv_priv command is working

eg: union select 1,2,3,group_concat(user,0x3a,file_priv) from mysql.user

Command used to Write INTO OUTFILE


* - fred93 - May 23, 2012

Is there any detailed tutorial u know, i searched it on HF, but didnt find it


or can u tell me with what text i should search this topic?


* - torque59 - May 23, 2012

Here's a compilation of all the tutorials

https://hackforums.net/showthread.php?tid=2008347

You can ddefinately look here and it will help you :-)


* - fred93 - May 23, 2012

Thank you mate :)

This is a great thread :)