Ps: Although I have not explained the copyright, I have to repost it. At least give me some face?
Www.2cto.com: we want the author to give a general question... To prevent readers from looking unsystematic
Author: magic spring
2.2.3Database Type judgment and various database features
Before injecting data into the database, you must first determine the database type. Because SQL injection is different for various databases, it is helpful to determine the database type for us to conduct Intrusion Detection for specific databases.
2.2.3.1Determination of Access database and Its Features
Determine on the error page:
This is the image above, whereMicrosoft JET Database Engine Error 80040e14It indicates that he is a database connected with the JET database engine, and JET is a database engine used by Microsoft Access and Visual Basic. Therefore, it is certain that the database connected to this page is a Microsoft Access database.
Query and judgment:
The program added with fault tolerance Processing does not display error messages. Therefore, you cannot determine the database from the webpage. However, Access has several default system tables, which can be distinguished from other databases by querying their default data tables. (Because most system tables in the Access database are unique)
Under normal circumstances, access is not allowed to view system tables, so we need to set up to display system tables in the database. Open the database, click tools in the toolbar, select system object, and click OK. The system table is displayed.
Access has a total of 6 system tables, as shown in the following table:
System Table Name |
System Column name |
MSysAccessObjects |
ID |
Data |
MSysAccessXML |
Id |
LValue |
ObjectGuid |
ObjectName |