Functions commonly used during sql injection

Important functions:

　　version() mysql database version

　　database() current database name

　　user() username

　　current_user() current username

　　system_user() system user name

　　@@datadir database path

　　@@version_compile_os operating system version

MySQL string functions:

　　length() returns the length of the string

　　substring() substr() intercepts the string

　　mid() left() takes a string with the specified number of characters starting from the left

　　concat() concatenation string without separator

　　concat_ws() connection string containing delimiters

　　group_concat() concatenates a group of strings

　　ord() returns the ASCII code

　　ascii()

　　hex() converts a string to hexadecimal

　　unhex() Reverse operation of hex

　　md5() returns MD5 value

　　floor(x) returns the largest integer not greater than x

　　round(x) returns the integer close to parameter x

　　rand() returns a random floating point number between 0-1

　　load_file() reads a file and returns the file contents as a string

　　sleep() sleeps for the specified number of seconds

　　if(true,t,f) if judgment

　　find_in_set() returns the position of the string in the string list

　　benchmark() specifies the number of times the statement is executed

Important databases:

　　information_schema contains all database information in MySQL

Important tables:

　　Information about all databases in schemata mysql

　　schema_name all database names

　　tables information in database tables

　　table_schema records the database name　

　　table_name record data table name

　　columns column information

　　column_name field name

More