SQL injection - Union query

1、 Display position of burst field

Before using a union query to explode a field , We need to understand union How to use .

UNION The operator is used to merge two or more SELECT The result set of the statement .

Please note that ,UNION Inside SELECT Statements must have the same number of columns . Columns must also have similar data types . meanwhile , Every one of them SELECT The order of the columns in the statement must be the same .

SQL UNION grammar :

SELECT column_name(s) FROM table_name1

UNION

SELECT column_name(s) FROM table_name2

Sign in sqli-labs In the target plane MySQL：

[[email protected] ~]# mysql -uroot -p123456

Switch to database security

MariaDB [(none)]> use security;

example 1： take users In the table id=1 and users In the table id=3 The two records of are merged into one table

MariaDB [security]> select * from users where id='1' union select * from users where id= '3';