Php & Sql Injection - UTF8 POC

There is a lot of talk about how addslashes and mysql_real_escape function are not safe to prevent injections. The truth is even the big frameworks or CMSs like Wordpress are using this functions and they do a god job so far.

I know there are some particular scenarios when using GBK charset, or utf8_decode can be used to inject some sql code, or some simple examples like 1' OR 1 -- that can be used when there is a simple where involved.

However, after a bit of research it seems very hard to inject something into a simple query with addslashes or mysql_real_escape used if the charset is UTF-8 and let's admit it, this is the most common scenario.

So, given this newbie script, pls provide a sql injection POC ( remember UTF-8 charset )

$mysql['username'] = addslashes($_POST['username']);

$mysql['password'] = addslashes($_POST['password']);



$sql = "SELECT *

FROM users

WHERE username = '{$mysql['username']}'

AND password = '{$mysql['password']}'";

Update - I just need a simple example not a full disclosure of the process. Even a link from google might work.

Source: Tips4all