There is a PHP link like this

abc.com/index.php?q=XYZ

XYZ is base64encoded parameter that I have verified is injectable, when i try abc.com/index.php?q=XYZ' it returns You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for

so probably the query is

`select * from TableName where q={QUERYPRAM`} or die(mysql_error());

how can I write my custom query here or get information since the output is actually in die() function.

I normally use sqlmap for this fucntion, but that is behaving very slow and closes request immediately.

any hint ?

EDIT : I am using this on my localhost, not on a live website

On my localhost I have a PHP link like this

abc.com/index.php?q=XYZ

where XYZ is a base64encoded parameter that I have verified is injectable. When I try abc.com/index.php?q=XYZ' it returns

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for

So probably the query is

`select * from TableName where q={QUERYPRAM`} or die(mysql_error());

How can I write my custom query here or get information since the output is actually in the die() function?

I normally use SQLMap for this function, but that is behaving very slow and closes request immediately.

There is a PHP link like this

abc.com/index.php?q=XYZ

XYZ is base64encoded parameter that I have verified is injectable, when i try abc.com/index.php?q=XYZ' it returns You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for

so probably the query is

`select * from TableName where q={QUERYPRAM`} or die(mysql_error());

how can I write my custom query here or get information since the output is actually in die() function.

I normally use sqlmap for this fucntion, but that is behaving very slow and closes request immediately.

any hint ?

There is a PHP link like this

abc.com/index.php?q=XYZ

XYZ is base64encoded parameter that I have verified is injectable, when i try abc.com/index.php?q=XYZ' it returns You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for

so probably the query is

`select * from TableName where q={QUERYPRAM`} or die(mysql_error());

how can I write my custom query here or get information since the output is actually in die() function.

I normally use sqlmap for this fucntion, but that is behaving very slow and closes request immediately.

any hint ?

EDIT : I am using this on my localhost, not on a live website