5 Feb
2008
5 Feb
'08
2:54 a.m.
On Mon, 2008-02-04 at 10:41 -0200, bugtraq wrote:
sql(diego@jdomain,127.0.0.1): query: SELECT pw_clear_passwd AS password, pw_domain AS domain, '192.168.224.1' AS host, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy FROM vpopmail WHERE pw_name = 'diego' AND pw_domain = 'domain' limit 1
I meant you could try something like:
password_query = select null as password, .. etc .. where pw_clear_passwd = '%w' .. etc .. limit 1;insert into logins values ('%u', now());
Or try creating a function of it so it works like:
password_query = select try_login('%u', '%w')
But I've no idea if either of them really works with MySQL.