当前位置:网站首页>关于davwa的SQL注入时报错:Illegal mix of collations for operation ‘UNION‘原因剖析与验证
关于davwa的SQL注入时报错:Illegal mix of collations for operation ‘UNION‘原因剖析与验证
2022-06-27 19:49:00 【dfzy$_$】
项目场景:
在进行dvwa靶场注入时,发现出现这里出现了一些bug:Illegal mix of collations for operation ‘UNION’
经过查询与验证后,解决并分析了这一问题。
原因分析:
之所以会出现这个情况,是union两端的字段的collatie(排序规则)不同。即dvwa的first_name与last_name字符校对格式与information_schema的发生了冲突:


解决方案:
我们需要将dvwa中的校对规则进行修改,让其与information中的一致,即改成utf8_general_ci:
alter table users modify first_name varchar(15) character set utf8 collate utf8_general_ci
alter table users modify last_name varchar(15) character set utf8 collate utf8_general_ci
alter table users modify user varchar(15) character set utf8 collate utf8_general_ci
alter table users modify password varchar(15) character set utf8 collate utf8_general_ci
此时,就可以解决了:

边栏推荐
- Common problems encountered by burp Suite
- Gao fushuai in the unit testing industry, pytest framework, hands-on teaching, will do this in the future test reports~
- I think I should start writing my own blog.
- How to design an elegant caching function
- \w和[A-Za-z0-9_],\d和[0-9]等价吗?
- vmware虚拟机PE启动
- Example of using gbase 8A OLAP function group by grouping sets
- This set of steps for performance testing using JMeter includes two salary increases and one promotion
- Gbase 8A method for reducing the impact on the system by controlling resource usage through concurrency during node replacement of V8 version
- Magic POI error in reading excel template file
猜你喜欢

使用Jmeter进行性能测试的这套步骤,涨薪2次,升职一次

Bit. Store: long bear market, stable stacking products may become the main theme

STM32CubeIDE1.9.0\STM32CubeMX 6.5 F429IGT6加LAN8720A,配置ETH+LWIP

年薪50W+的测试大鸟都在用这个:Jmeter 脚本开发之——扩展函数

Common problems encountered by burp Suite

6G显卡显存不足出现CUDA Error:out of memory解决办法

Slow bear market, bit Store provides stable stacking products to help you cross the bull and bear

∫(0→1) ln(1+x) / (x ² + 1) dx

Professor of Tsinghua University: software testing has gone into a misunderstanding - "code is necessary"

STM32F107+LAN8720A使用STM32cubeMX配置网络连接+tcp主从机+UDP app
随机推荐
I think I should start writing my own blog.
Gbase 8A OLAP analysis function cume_ Example of dist
[LeetCode]100. Same tree
[Sword Offer II]剑指 Offer II 029. 排序的循环链表
【MySQL】数据库函数通关教程下篇(窗口函数专题)
对话乔心昱:用户是魏牌的产品经理,零焦虑定义豪华
. Net learning notes (V) -- lambda, LINQ, anonymous class (VaR), extension method
List of language weaknesses --cwe, a website worth learning
regular expression
∫(0→1) ln(1+x) / (x ² + 1) dx
分享|智慧环保-生态文明信息化解决方案(附PDF)
Stm32f107+lan8720a use stm32subemx to configure network connection +tcp master-slave +udp app
Remote invocation of microservices
Slow bear market, bit Store provides stable stacking products to help you cross the bull and bear
BAT测试专家对web测试和APP测试的总结
如何做好功能测试?你确定不想知道吗?
Installing Oracle11g under Linux
Sharing | intelligent environmental protection - ecological civilization informatization solution (PDF attached)
Oracle migration MySQL unique index case insensitive don't be afraid
Luogu p5706 redistributing fertilizer and house water