Sqli-labs Customs Record-3

/* Mood xxxx*/at this time

Through this level, I learned

1. Probably can MySQL echo error injection of the face, can be based on an error, write a closed statement.

Add a single quotation mark. The error is shown below.

Add a single quotation mark and say

1 ") LIMIT 0,1 ' at line 1

In fact, you can guess what his SQL statement probably is.

That should be the case.

Select *　where ('$id');

Depends on the driver's level.

and then write payload.

- 1 ' ) union Select--+

Let's see if the source code is so.

Yes, sure.

Sqli-labs Customs Record-3