sql注入--宽字节注入

SQL注入：宽字节注入攻防解析

原创

已于 2022-05-24 10:30:21 修改 · 771 阅读

4 ·

CC 4.0 BY-SA版权

文章标签：

#sql #php #mysql

于 2022-01-03 16:46:50 首次发布

sql注入–宽字节注入

靶场：sqli-labs-master
下载链接：靶场下载链接

第32关
php源码

<?php
//including the Mysql connect parameters.
include("../sql-connections/sql-connect.php");

function check_addslashes($string)
{
    $string = preg_replace('/'. preg_quote('\\') .'/', "\\\\\\", $string);          //escape any backslash
    $string = preg_replace('/\'/i', '\\\'', $string);                               //escape single quote with a backslash
    $string = preg_replace('/\"/', "\\\"", $string);                                //escape double quote with a backslash
      
    
    return $string;
}

// take the variables 
if(isset($_GET['id']))
{
$id=check_addslashes($_GET['id']);
//echo "The filtered request is :" .$id . "<br>";

//logging the connection parameters to a file for analysis.
$fp=fopen('result.txt','a');
fwrite($fp,'ID:'.$id."\n");
fclose($fp);

// connectivity 

mysql_query("SET NAMES