
11.01.2009, 13:26
|
|
Динозавр
Регистрация: 10.01.2008
Сообщений: 2,841
Провел на форуме: 9220514
Репутация:
3338
|
|
Потому что там вот такая ошибка идет:
Код:
http://www.electionguide.org/country-news.php?ID=208+order+by+10--
Query Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ORDER BY news_items.news_date DESC' at line 9
SQL: SELECT news_items.id, news_title, news_date, rss_title, IF(ext_id>0, news_link, CONCAT('http://www.electionguide.org/country-news.php?ID=',country.id,'#anchor_', news_items.id)) as news_link, IF(ext_id>0, external_news.rss_title, 'ElectionGuide') as news_source, news_content, ext_id FROM news_items LEFT JOIN country on country.id=news_items.country LEFT JOIN external_news ON external_news.id=news_items.ext_id WHERE news_items.is_active=1 AND news_items.country=208 order by 10-- ORDER BY news_items.news_date DESC
LEFT JOIN, или искать уязвимость в другом месте, или фактически blind sql-inj
|
|
|