当前位置:网站首页>In SQL injection, why must the ID of union joint query be equal to 0
In SQL injection, why must the ID of union joint query be equal to 0
2022-07-02 09:41:00 【hangshao0.0】
In fact, it is not necessary to let id=0
?id=0' union select 1,2,3 --+ ?id=0' union select 1,database(),3 --+
?id=0' union select 1,database(),user() --+
there id Special attention is needed :
If there are only two echo positions
that id You must fill in a nonexistent number (-1 perhaps 0), Joint query can echo successfully
Because in the data table ,id by 1,2,3,……
If the parameter is :?id=1' union select 1,2,3 --+
So the query statement is :select * from users where id='1' union select 1,2,3 --+' limit 0,1
id=1 The data is queried , Return to page , It occupies two echo positions
This is the time , union The content of the query , Because the only two echo bits are occupied , It makes it impossible to echo
If id=2, The returned content will also occupy the echo bit , Lead to union The content of the query cannot be echoed to the page
If id Is a number that does not exist in the table , for example id=0,id=-1 wait
So the query statement is :select * from users where id='0' union select 1,2,3 --+' limit 0,1
because id=0 No query results , So the page returns union The content of the query
You don't have to let id=0
Actually id=-1,id=-5 It's OK to wait
therefore , We can know :
as long as union The previous query failed , that union The following query results can be echoed to the page
id=1’ and 1=2 union select 1,2,3 –+ adopt and 1=2 Statement to trigger an error
id=1’ or 1=1 union select 1,2,3 –+ adopt or 1=1 Statement to trigger an error
边栏推荐
- 2837xd Code Generation - stateflow (4)
- Probability is not yet. Look at statistical learning methods -- Chapter 4, naive Bayesian method
- Record personal understanding and experience of game console configuration
- View the port of the application published by was
- 逆变器simulink模型——处理器在环测试(PIL)
- Ckeditor 4.10.1 upload pictures to prompt "incorrect server response" problem solution
- 攻防世界-Web进阶区-unserialize3
- 并网逆变器PI控制(并网模式)
- 每天睡觉前30分钟阅读_day4_Files
- JDBC review
猜你喜欢
Elastic Stack之Beats(Filebeat、Metricbeat)、Kibana、Logstash教程
Failed to configure a DataSource: ‘url‘ attribute is not specified and no embedd
Chrome browser tag management plug-in – onetab
Typora安装包分享
Matplotlib swordsman - a stylist who can draw without tools and code
Redis 序列化 GenericJackson2JsonRedisSerializer和Jackson2JsonRedisSerializer的区别
自定义Redis连接池
每天睡前30分钟阅读Day6_Day6_Date_Calendar_LocalDate_TimeStamp_LocalTime
Customize redis connection pool
Fragmenttabhost implements the interface of housing loan calculator
随机推荐
MySQL事务
Failed to configure a DataSource: ‘url‘ attribute is not specified and no embedd
2837xd 代码生成——补充(3)
MySQL default transaction isolation level and row lock
Failed to configure a DataSource: ‘url‘ attribute is not specified and no embedd
Chrome video download Plug-in – video downloader for Chrome
QT signal slot summary -connect function incorrect usage
Solutions to Chinese garbled code in CMD window
Number structure (C language -- code with comments) -- Chapter 2, linear table (updated version)
Chrome user script manager tempermonkey monkey
Matplotlib swordsman line - layout guide and multi map implementation (Updated)
大学生四六级作文模板(自创版,成功跨过六级)
MySql报错:unblock with mysqladmin flush-hosts
TD联合Modelsim进行功能仿真
YOLO物体识别,生成数据用到的工具
MySQL error: unblock with mysqladmin flush hosts
Mathematics in machine learning -- point estimation (I): basic knowledge
Discussion on improving development quality and reducing test bug rate
每天睡前30分钟阅读Day5_Map中全部Key值,全部Value值获取方式
2837xd 代码生成——补充(1)