Is there a way to update a table, and select it within one statement?

Question

I am currently practicing SQL injection on a local host web application. In order to successfully do that, a value must be returned in the statement (by using SELECT ). I'm trying to change the password of the user:

changepwd', (UPDATE mysql.user SET authentication_string=PASSWORD('new password') 
             WHERE user='root' UNION SELECT authentication_string from mysql.user)) #

With SQL injection you can't use ; . I tried UNION in that example to see if it would work but no luck. Any other ideas i could try?

Answer 1

I think the answer to this question is here .

In short the answer is create a stored procedure.