Reply to thread

Message

<blockquote data-quote="Ecko" data-source="post: 452583" data-attributes="member: 24874">This is with a default Apache stack (no ModSecurity and using PHP 5.6):[code]$ curl -IL &quot;http://thedomain.tld/modtools/query.php?what=deletegroup&amp;id=1;DROP%20TABLE%20smf_calender;&quot;HTTP/1.1 302 Moved TemporarilyDate: Wed, 28 Aug 2019 13:21:10 GMTServer: ApacheLocation: guilds.php?id=1;DROP TABLE smf_calender;&amp;back=deletedContent-Type: text/html; charset=UTF-8HTTP/1.1 302 Moved TemporarilyDate: Wed, 28 Aug 2019 13:21:10 GMTServer: ApacheExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0Pragma: no-cacheSet-Cookie: PHPSESSID=b4ookfhpo7toq5703hrqtap361; path=/Location: https://thedomain.tld/modtools/guilds?id=1;DROP+TABLE+smf_calender;&amp;back=deletedContent-Type: text/html; charset=UTF-8$ mysql -e &quot;DESCRIBE rscdump_smf371.smf_calendar;&quot;+------------+-----------------------+------+-----+------------+----------------+| Field&nbsp; &nbsp; &nbsp; | Type&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | Null | Key | Default&nbsp; &nbsp; | Extra&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |+------------+-----------------------+------+-----+------------+----------------+| id_event&nbsp;&nbsp; | smallint(5) unsigned&nbsp; | NO&nbsp;&nbsp; | PRI | NULL&nbsp; &nbsp; &nbsp;&nbsp; | auto_increment || start_date | date&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | NO&nbsp;&nbsp; | MUL | 0001-01-01 |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; || end_date&nbsp;&nbsp; | date&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | NO&nbsp;&nbsp; | MUL | 0001-01-01 |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; || id_board&nbsp;&nbsp; | smallint(5) unsigned&nbsp; | NO&nbsp;&nbsp; |&nbsp; &nbsp;&nbsp; | 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; || id_topic&nbsp;&nbsp; | mediumint(8) unsigned | NO&nbsp;&nbsp; | MUL | 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; || title&nbsp; &nbsp; &nbsp; | varchar(255)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | NO&nbsp;&nbsp; |&nbsp; &nbsp;&nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; || id_member&nbsp; | mediumint(8) unsigned | NO&nbsp;&nbsp; |&nbsp; &nbsp;&nbsp; | 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |[/code]I adjusted query.php to so deletegroup deletes from smf_boards instead, with board_id instead of just id. board_id of 1 has been deleted, smf_calendar still exists. So yes, show me the general query log.</blockquote>

[QUOTE="Ecko, post: 452583, member: 24874"] This is with a default Apache stack (no ModSecurity and using PHP 5.6): [code] $ curl -IL "http://thedomain.tld/modtools/query.php?what=deletegroup&id=1;DROP%20TABLE%20smf_calender;" HTTP/1.1 302 Moved Temporarily Date: Wed, 28 Aug 2019 13:21:10 GMT Server: Apache Location: guilds.php?id=1;DROP TABLE smf_calender;&back=deleted Content-Type: text/html; charset=UTF-8 HTTP/1.1 302 Moved Temporarily Date: Wed, 28 Aug 2019 13:21:10 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=b4ookfhpo7toq5703hrqtap361; path=/ Location: https://thedomain.tld/modtools/guilds?id=1;DROP+TABLE+smf_calender;&back=deleted Content-Type: text/html; charset=UTF-8 $ mysql -e "DESCRIBE rscdump_smf371.smf_calendar;" +------------+-----------------------+------+-----+------------+----------------+ | Field | Type | Null | Key | Default | Extra | +------------+-----------------------+------+-----+------------+----------------+ | id_event | smallint(5) unsigned | NO | PRI | NULL | auto_increment | | start_date | date | NO | MUL | 0001-01-01 | | | end_date | date | NO | MUL | 0001-01-01 | | | id_board | smallint(5) unsigned | NO | | 0 | | | id_topic | mediumint(8) unsigned | NO | MUL | 0 | | | title | varchar(255) | NO | | | | | id_member | mediumint(8) unsigned | NO | | 0 | | [/code] I adjusted query.php to so deletegroup deletes from smf_boards instead, with board_id instead of just id. board_id of 1 has been deleted, smf_calendar still exists. So yes, show me the general query log. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members