Mysql injection of commonly used functions

system_user () system function name

user () User Name

current_user () the current user name

session_user () connecting to the database user name

database () database name

versionI () database version

@@ datadir database Road near

@@ basedir database installation Road near

@@ version_compile_os operating system

count () returns the number of execution results

concat () without connection string delimiter

CONCAT_WS () containing the connection string delimiter

load_file () read local files

write into outfile file

ascii () ASCII code value strings

the ord () returns a character string of ASCII value

MID () Returns a string portion

substr () Returns a string part 7

length () Returns a string length

left () Returns a string of several characters left

floor () returns the largest integer less than or equal to x

rand () returns a random number between 0 and 1

sleep () make this statement runs n seconds

if()           > select if (1>2,2,3);   ->3

strcmp () comparing the contents of the string

IFNULL () If parameter 1 is not null, then a return parameter value, otherwise the return value parameter 2

exp () Returns the power of x e

system_user () system function name

user () User Name

current_user () the current user name

session_user () connecting to the database user name

database () database name

versionI () database version

@@ datadir database Road near

@@ basedir database installation Road near

@@ version_compile_os operating system

count () returns the number of execution results

concat () without connection string delimiter

CONCAT_WS () containing the connection string delimiter

load_file () read local files

write into outfile file

ascii () ASCII code value strings

the ord () returns a character string of ASCII value

MID () Returns a string portion

substr () Returns a string part 7

length () Returns a string length

left () Returns a string of several characters left

floor () returns the largest integer less than or equal to x

rand () returns a random number between 0 and 1

sleep () make this statement runs n seconds

if()           > select if (1>2,2,3);   ->3

strcmp () comparing the contents of the string

IFNULL () If parameter 1 is not null, then a return parameter value, otherwise the return value parameter 2

exp () Returns the power of x e