SQL query string

noob question here, can SQL execute url-encoded string? or any form of encoded string?

i tried to google but it doesn't yield me any results.

Tagged:

Comments

  • In order to properly process the SQL query, the query string has to get decoded, first. Usually, this is automatically done by e.g. the webserver.
    Some SQL server engines might have additional built-in functions for decoding/parsing things like base64, XML or JSON and then executing the result. But the SQL standard itself doesn't define/support any encoding/decoding functionality.


    Hack The Box
    OSWE | GREM | OSCE | GASF | eJPT

    Feel free to PM me your questions, but please explain what you tried, so far.

  • understood. thanks for the information!

Sign In to comment.