SQL injection - blind injection

1、 Blind annotation based on Boolean

length How to use the function ： Used in MySQL The length of the calculated field in , A Chinese character is calculated 3 Characters , A number or word Mother numerator 1 Characters .

example ： MariaDB [security]> select username,password from users where id=1 and ( length(database()) = 8);

Underneath sql Inject ：

Less-8 To Less10 All are GET Blind note of the way , But the way of closing is different .

http://192.168.98.66/sqli-labs/Less-8/?id=1' and (length(database())=8)--+

appear you are in say