(07-01-2014, 03:12 AM)1llusion Wrote: This is great! Reminds me of a time, when I hacked our school website and being the good guy I am, I reported the vuln next day. It was the most basic SQLi you can imagine. A day later, I get invited to headmasters office and I meet the IT guy there. He is an older guy... he stares at me, like I'm the biggest hax0r in the world. I have to explain what SQLi is and how it works over and over. After about an hour of me telling him how dangerous this is and how his server already has been hacked and is being used for illegal purposes he says: well, I'm using a PHP module from the 90's to connect to the database, but nobody pays me to update it. So I'll keep it...