[MrBr]

Hello, I have a question.
While i'm training in some websites, i faced this situation.

When doing
id=-2"+or(^^)der+by+5--+-
Then
id=-2"+un(^^)ion+sel(^^)ect+1,2,3,4,5--+-
Here i get Not Acceptable!

So i add some filters like /*!50000(word)*/
id=-2"+/*!50000un(^^)ion*/+sel(^^)ect+1,2,3,4,5--+-
Or filter both 'un(^^)ion' and 'sel(^^)ect'

It gives me error

Code

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1,2,3,4,5-- -" ORDER BY id LIMIT 50' at line 1

I don't know exactly what should i do, It came to my mind that when adding filter maybe the SQL payload gone wrong or readed wrong! how can i solve it.
Thanks Advanced.

(^^) are for hackforums.net security

[[BLANK]]

http://ftp.nchu.edu.tw/MySQL/doc/refman/...ments.html

From a “-- ” sequence to the end of the line. In MySQL, the “-- ” (double-dash) comment style requires the second dash to be followed by at least one whitespace or control character (such as a space, tab, newline, and so on).

That may be your issue.

[MrBr]

Thank you for your reply

...

Thank you for your reply, I have tried to some styles
This, (--) and (--+-), (+--+), (as `).
but nothing work.

---

Up, if there is someone want to add something i will be so happy.