Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Statistics

  • 22-03-2012 2:08pm
    #1
    RealistSpy
    Registered Users, Registered Users 2 Posts: 1,686 ✭✭✭


    Hi,

    I was doing a research on my college project which involves sport performance statistics. While on the AAI website in the Top List area I discovered an sql injection to a seperate site: This allows you to pass the boundry limit instead of the top 20 athletes.
    Example: Instead of the Top 20 you can view the Top 60.

    How to do it:
    http://www.tilastopaja.org/db/toplist.php?list=topirl&All=0&Ind=0&top=20&Season=2011

    Change: top=20 to top=60 or Any specific amount.
    Change: Season=2011 to any season you want

    I am not sure if I can post it here, if not you can delete it.
    Let me know what you think of this.....


Comments

  • #2
    ocnoc
    Registered Users, Registered Users 2 Posts: 830 ✭✭✭ocnoc


    Cool


  • #3
    TFBubendorfer
    Registered Users, Registered Users 2 Posts: 6,340 ✭✭✭TFBubendorfer


    Nice, even though technically speaking that has f*ck all to do with sql injection. :rolleyes:


  • #4
    Burgman
    Registered Users, Registered Users 2 Posts: 183 ✭✭Burgman


    Changed it to top 600 and still couldn't find my name. Damn. Have to work harder.


  • #5
    RealistSpy
    Registered Users, Registered Users 2 Posts: 1,686 ✭✭✭RealistSpy


    TFBubendorfer wrote: »
    Nice, even though technically speaking that has f*ck all to do with sql injection. :rolleyes:

    Yeh I had no better name for it - url manipulation perhaps.


  • #6
    RandyMann
    Closed Accounts Posts: 920 ✭✭✭RandyMann


    Hey Realist, are you doing any training lately, athletics, weights? I used to enjoy reading your logs. Hope you get back into it sometime.


  • Advertisement
  • #7
    RealistSpy
    Registered Users, Registered Users 2 Posts: 1,686 ✭✭✭RealistSpy


    RandyMann wrote: »
    Hey Realist, are you doing any training lately, athletics, weights? I used to enjoy reading your logs. Hope you get back into it sometime.


    I am doing youtube video log. http://www.youtube.com/user/ThePureOctane?ob=0&feature=results_main

    I am having a great start to the season so far after changing few things.


  • #8
    RandyMann
    Closed Accounts Posts: 920 ✭✭✭RandyMann


    RealistSpy wrote: »
    I am doing youtube video log. http://www.youtube.com/user/ThePureOctane?ob=0&feature=results_main

    I am having a great start to the season so far after changing few things.

    Nice 1, good luck in your season.


Advertisement