Failed to import SQL injection! Login by yourself, test SQL injection, test in the database, but this always fails, please advise! Login. phpHTMLcode & lt ;! DOCTYPEhtmlPUBLIC & quot;-// W3C // DTDXHTML1.0Transitional // EN & quot; & quot!
Login by yourself, test SQL injection, test in the database, but this always fails, please advise!
Login. php
HTML code
Login interface-SQL injection test
LoginCl. php
PHP code
ManageCenter. php
HTML code
Management CenterWelcome to administrator, management center!
Use a universal password in the database to inject Select * from users where username = 'Sean 'and password = 'cuwumima' or 1 = '1 ';
Yes, but the login password fails when you enter cuwumima 'or 1 = '1! The password received by loginCl. php becomes cuwumima \ 'or 1 = \' 1. how can this problem be solved! Thank you!
------ Solution --------------------
Magic_quotes_gpc check to see if it has been set to on!
------ Solution --------------------
Discussion
Magic_quotes_gpc and magic_quotes_runtime. These two functions can be set to ON in php. ini .....
------ Solution --------------------
Let the bad guy ci1699 teach you...
------ Solution --------------------
That means you didn't turn off the environment filter ..
Phpinfo () check the php. ini path to see if there is any correct location.
The configuration is magic_quotes_gpc.
Get_magic_quotes_gpc () this is a php function