实验吧一注入题

在做题中搜索遇到了这题,http://ctf5.shiyanbar.com/web/index_2.php?id=1

加一个单引号报错了。可以简单猜测一下其sql语句为 :select * from admin where id = '1'

现在多加了一个但因好就会出现。

select * from admin where id = '1'‘

<pre>You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''1''' at line 1</pre>

猜你喜欢

转载自www.cnblogs.com/nul1/p/9067603.html