Member Avatar for agwx2

I have a file that a friend/hacker was able to create called \'AND SELECT * FROM \'users\'\'
The FTP command DELE \'AND SELECT * FROM \'users\'\' says this:

Command:    DELE \'AND SELECT * FROM \'users\'\'
Response:   553 Prohibited file name: \'AND SELECT * FROM \'users\'\'

That means it can't delete a file with an SQL injection as its name.
Any ideas on how to delete the file? I need help.
P.S. The file is on a remote ftp server, so i cannot go into the hard disk and delete it directly.

  • 2 Contributors
  • 2 Replies
  • 170 Views
  • 1 Year Discussion Span
  • Latest Post Latest Post by agwx2
Member Avatar for pritaeas

Why not move all files you need to keep and try a (m)delete *

Or perhaps DELE "\'AND SELECT * FROM \'users\'\'" may work, depending on the FTP server.

Edited by pritaeas
Member Avatar for agwx2

Thanks. I'll try it.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.