https://github.com/philip-hub/sql-injection-hack-workshop
This is a workshop to teach the basics of SQL injection
https://github.com/philip-hub/sql-injection-hack-workshop
css hacking php php-sql-injection sql sql-injection sql-injection-attacks
Last synced: 11 months ago
JSON representation
This is a workshop to teach the basics of SQL injection
- Host: GitHub
- URL: https://github.com/philip-hub/sql-injection-hack-workshop
- Owner: philip-hub
- Created: 2021-08-11T02:40:52.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2023-02-12T02:44:51.000Z (about 3 years ago)
- Last Synced: 2025-02-05T18:53:47.373Z (about 1 year ago)
- Topics: css, hacking, php, php-sql-injection, sql, sql-injection, sql-injection-attacks
- Language: PHP
- Homepage:
- Size: 27.3 KB
- Stars: 5
- Watchers: 2
- Forks: 2
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# SQL injection hack workshop
Build In | Contributors | Live version
--- | --- | ---
**PHP/SQL/HTML/CSS** | [@philip-hub](https://github.com/philip-hub) | Clone and run with your local SQL server
# Description and Setup
This is a dummy bank website with poor security to teach people about the basics of SQL injection. In order to use this you will need a PHP server and you will need to create a SQL server, database, and table. Both of these tasks can easliy be done with [MAMP](https://www.mamp.info/en/). Once MAMP is instaled clone this repo to the desired path on your machine. MAMP Preferences then Web Server and navigate to the path that you cloned this repo too. Start MAMP up and should bring you to a MAMP homepage on your local host where you can access myPHPAdmin. Use myPHPadmin to create a SQL database and table. This [video](https://www.youtube.com/watch?v=s7p5aS8m57k) is a good guide for this task. Name your table "mhc_bank" without the quotes. In your table create the columns "username" , "password", and "amount" as type TEXT all as those are spelled without the quotes. Use the insert command in the menu bar to add some fake users with passwords and amounts. Then open the your repo path in your favorite a text or code editor. Create a connect.php file. Put the following code in connect.php.
```
```
Try signing in to one user's account then refernce the article below and the source code and try some SQL injection commands.
W3 Schools has a great article about SQL injection here
---