On Mon, 2008-02-04 at 10:41 -0200, bugtraq wrote:
> sql([EMAIL PROTECTED],127.0.0.1): query: SELECT pw_clear_passwd AS password,
> pw_domain AS domain, '192.168.224.1' AS host, 'Y' AS nologin, 'Y' AS
> nodelay, 'Y' AS proxy FROM vpopmail WHERE pw_name = 'diego' AND
> pw_domain = 'domain' limit 1

I meant you could try something like:

password_query = select null as password, .. etc ..
  where pw_clear_passwd = '%w' .. etc ..
  limit 1;insert into logins values ('%u', now());

Or try creating a function of it so it works like:

password_query = select try_login('%u', '%w')

But I've no idea if either of them really works with MySQL.

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to