Cannot post string "union select" php form

[php_mysql_beginer911]

Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
... it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone

[Jerry Stuckle]

php_mysql_beginer911 wrote:

Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
.. it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone

I have absolutely NO IDEA what you're talking about.

Do you have some PHP code showing this?

Did you ask your hosting company?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
js*******@attglobal.net
==================

[php_mysql_beginer911]

On May 9, 6:15 pm, Jerry Stuckle <[e-mail]:

php_mysql_beginer911 wrote:

Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
.. it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone

I have absolutely NO IDEA what you're talking about.

Do you have some PHP code showing this?

Did you ask your hosting company?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================

i have allready asked my hosting company and hope to recieve reply in
1 or 2 days
but i really need to fix this as soon as possible ..
it's just a simple html form and filename is test.php
<?php
if(isset($_POST['submit'])){
echo $_POST['content'];
}
?>
<form method=post >
<textarea name=content cols=50 rows=100 ></textarea>
</textarea>
<input type=sumit value=submit name=submit >
</form>
the above code works fine until i post a string which contents words
"union select" ...
so i think the problem is with string which i am posting ...
i never had this kind of problem and was wondering is it possible that
server can have configuration where some special words are not allowed
in posting data.
hope someone knows the reason ...
thanks

[sheldonlg]

php_mysql_beginer911 wrote:

On May 9, 6:15 pm, Jerry Stuckle <[e-mail]:

>php_mysql_beginer911 wrote:

>>Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
.. it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone

I have absolutely NO IDEA what you're talking about.

Do you have some PHP code showing this?

Did you ask your hosting company?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================

i have allready asked my hosting company and hope to recieve reply in
1 or 2 days
but i really need to fix this as soon as possible ..
it's just a simple html form and filename is test.php
<?php
if(isset($_POST['submit'])){
echo $_POST['content'];
}
?>
<form method=post >
<textarea name=content cols=50 rows=100 ></textarea>
</textarea>
<input type=sumit value=submit name=submit >
</form>
the above code works fine until i post a string which contents words
"union select" ...
so i think the problem is with string which i am posting ...
i never had this kind of problem and was wondering is it possible that
server can have configuration where some special words are not allowed
in posting data.
hope someone knows the reason ...
thanks

Why are you "posting" an sql query? That is all done at the back end --
After the post to get to the php code. What you do is grab the
information and in the php server code -- after the post -- you build
the query.

[php_mysql_beginer911]

On May 9, 7:45 pm, sheldonlg <sheldonlgwrote:

php_mysql_beginer911 wrote:

On May 9, 6:15 pm, Jerry Stuckle <[e-mail]:

php_mysql_beginer911 wrote:
Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
.. it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone
I have absolutely NO IDEA what you're talking about.

Do you have some PHP code showing this?

Did you ask your hosting company?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================

i have allready asked my hosting company and hope to recieve reply in
1 or 2 days
but i really need to fix this as soon as possible ..
it's just a simple html form and filename is test.php
<?php
if(isset($_POST['submit'])){
echo $_POST['content'];
}
?>
<form method=post >
<textarea name=content cols=50 rows=100 ></textarea>
</textarea>
<input type=sumit value=submit name=submit >
</form>
the above code works fine until i post a string which contents words
"union select" ...
so i think the problem is with string which i am posting ...
i never had this kind of problem and was wondering is it possible that
server can have configuration where some special words are not allowed
in posting data.
hope someone knows the reason ...
thanks

Why are you "posting" an sql query? That is all done at the back end --
After the post to get to the php code. What you do is grab the
information and in the php server code -- after the post -- you build
the query.

i am not posting a sql query ....
i have a created a simple cms where user can update pages using php
form
... the problem is that whenever user tryto post a data which contents
"union select" in the string it doesnt get posted instead it shows
error on same page that the page was not found on this server ... it
doesn't matter where those 2 words are in the whole posted data .....
i am guessing posted data is being filtered ..
but than how can i make a cms where i can allow user to update pages
through php form
i cannot tell user that they there data should not content those 2
words...
i tried posting same data with those 2 words on other server and it
worked fine..
but on my current server it doesn't get posted if string content those
2 words ..
anyone knows anything please reply
thanks

[sheldonlg]

php_mysql_beginer911 wrote:

On May 9, 7:45 pm, sheldonlg <sheldonlgwrote:

>php_mysql_beginer911 wrote:

>>On May 9, 6:15 pm, Jerry Stuckle <[e-mail]:
php_mysql_beginer911 wrote:
Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
.. it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone
I have absolutely NO IDEA what you're talking about.
Do you have some PHP code showing this?
Did you ask your hosting company?
--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================
i have allready asked my hosting company and hope to recieve reply in
1 or 2 days
but i really need to fix this as soon as possible ..
it's just a simple html form and filename is test.php
<?php
if(isset($_POST['submit'])){
echo $_POST['content'];
}
?>
<form method=post >
<textarea name=content cols=50 rows=100 ></textarea>
</textarea>
<input type=sumit value=submit name=submit >
</form>
the above code works fine until i post a string which contents words
"union select" ...
so i think the problem is with string which i am posting ...
i never had this kind of problem and was wondering is it possible that
server can have configuration where some special words are not allowed
in posting data.
hope someone knows the reason ...
thanks

Why are you "posting" an sql query? That is all done at the back end --
After the post to get to the php code. What you do is grab the
information and in the php server code -- after the post -- you build
the query.

i am not posting a sql query ....
i have a created a simple cms where user can update pages using php
form
.. the problem is that whenever user tryto post a data which contents
"union select" in the string it doesnt get posted instead it shows
error on same page that the page was not found on this server ... it
doesn't matter where those 2 words are in the whole posted data .....
i am guessing posted data is being filtered ..
but than how can i make a cms where i can allow user to update pages
through php form
i cannot tell user that they there data should not content those 2
words...
i tried posting same data with those 2 words on other server and it
worked fine..
but on my current server it doesn't get posted if string content those
2 words ..
anyone knows anything please reply
thanks

Sorry, misunderstood what you were saying.

[Jerry Stuckle]

php_mysql_beginer911 wrote:

On May 9, 6:15 pm, Jerry Stuckle <[e-mail]:

>php_mysql_beginer911 wrote:

>>Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
.. it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone

I have absolutely NO IDEA what you're talking about.

Do you have some PHP code showing this?

Did you ask your hosting company?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================

i have allready asked my hosting company and hope to recieve reply in
1 or 2 days
but i really need to fix this as soon as possible ..
it's just a simple html form and filename is test.php
<?php
if(isset($_POST['submit'])){
echo $_POST['content'];
}
?>
<form method=post >
<textarea name=content cols=50 rows=100 ></textarea>
</textarea>
<input type=sumit value=submit name=submit >
</form>
the above code works fine until i post a string which contents words
"union select" ...
so i think the problem is with string which i am posting ...
i never had this kind of problem and was wondering is it possible that
server can have configuration where some special words are not allowed
in posting data.
hope someone knows the reason ...
thanks

OK, I *think* I understand now.

I doubt very much it's your hosting company. They don't look at the
data. Much more probably the data is being parsed by your CMS.

You say you're "building a cms" - are you actually writing the code
yourself, or did you get something to start with off of the web (or
somewhere else)?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
js*******@attglobal.net
==================

[php_mysql_beginer911]

On May 10, 7:42 pm, Jerry Stuckle <[e-mail]:

php_mysql_beginer911 wrote:

On May 9, 6:15 pm, Jerry Stuckle <[e-mail]:

php_mysql_beginer911 wrote:
Hi .. hope someone will help
i am trying to figure it out why i cannot post string "union select"
every time i try to post data which content union and select ..
the page doesn't get posted and it shows error page not found on this
server
i googled and found some people use union and select to hack sites
(mysql injection)
i guess the server i am using has some kind of filter and if a post
string content "union select"
.. it simply doesn't post them and shows error .. (am i correct ???)
i don't know realy whats really wrong and even if it's possible that
server have some kind of filter how can i post everything (including
union select) without getting page not found error
please reply
thank to everyone
I have absolutely NO IDEA what you're talking about.

Do you have some PHP code showing this?

Did you ask your hosting company?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================

i have allready asked my hosting company and hope to recieve reply in
1 or 2 days
but i really need to fix this as soon as possible ..
it's just a simple html form and filename is test.php
<?php
if(isset($_POST['submit'])){
echo $_POST['content'];
}
?>
<form method=post >
<textarea name=content cols=50 rows=100 ></textarea>
</textarea>
<input type=sumit value=submit name=submit >
</form>
the above code works fine until i post a string which contents words
"union select" ...
so i think the problem is with string which i am posting ...
i never had this kind of problem and was wondering is it possible that
server can have configuration where some special words are not allowed
in posting data.
hope someone knows the reason ...
thanks

OK, I *think* I understand now.

I doubt very much it's your hosting company. They don't look at the
data. Much more probably the data is being parsed by your CMS.

You say you're "building a cms" - are you actually writing the code
yourself, or did you get something to start with off of the web (or
somewhere else)?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================

Thanks everyone for reply..
the problem was from hosting company ..
i guess they were parsing the posted data...
thanks again for your replies