[userchange]

I have a waf probleme in this url

Code

http://www.bzaf.tv/video_player.php?id=225

ordr by does not work

Code

http://www.bzaf.tv/video_player.php?id=225 order by 1

also and+1=1

Code

http://www.bzaf.tv/video_player.php?id=225+and+1=1

Also Im asking please if there is a way to update or insert into by using union select sqli
Any help please

[userchange]

srill need some help please

up

[DROP TABLE users]

I don't think this site is vulnerable to SQLi. I tried adding an ' after the id=255 and no error popped up.

[iliketrees123]

I don't think this site is vulnerable to SQLi. I tried adding an ' after the id=255 and no error popped up.

That only works for error based sqli, union sql injection and blind based injection could still work

EDIT) No, it's not injectable

[userchange]

Thank you gor your reply :)

but I still think its vulnerable