sql injections are a joke

all this does is trick the server into running some code in the password field that appears you have the correct password ie 1=1 or a=a
the website then believes you have the right password, instead of comparing the two passwords to see if they are identical it takes the statement 1=1 and since that is true it lets you in

google inurl:index.asp
for possibly vunerable websites

then to log in try injecting different code

i will use the churches of kenya site as an example
http://www.ncck.org/*****/login.asp?check=false
go to the login
type *****
then in the password field try different sql lines from below
if you get an error message when you enter the line that means the website is vunerable so keep trying untill you get it

here is the list
' or 'a'='a
' or 1=1--
" or 1=1--
" or "a"="a
or 1=1--
') or ('a'='a

have fun

lol pwned that site

haha ya it is easy

i've been wanting to know how sql works. if i'd known it was so simple i would have tried it ages ago

I tried it on the churches kenya website but when i tried to go to the forum it said the host was locked.

did you have this problem?

no lol maybe they got tired of people doing it lol

i used
hi' or 'a'='a

ok um... what?

never tried sql injections... run me thru it?

it tricks the server into thinking that the password is correct because the statement you send it is true

scriptkiddies >:>

how am i a skiddie?
am i using code i do not understand?
am i running programs made by others that i do not understand?
before you flame at least gather some proof

I deleted everyone's post with <noembed>...