如何在输入框输入数据的同时，在PHP中进行SQL注入？

Question

如何在 Insert query 或 [= 的上下文中执行 SQL Injection 14=]?任何帮助将不胜感激。

Answer 1

首先，不要用mysql_，用mysqli_。

其次，那是因为您不能在 mysql_query() 中放置两个查询。否则他们会把它命名为 mysql_queries()

只需进行两个单独的查询。这是 docs.

这是手册中关于其用法的一个基本示例：

<?php
$mysqli = new mysqli("localhost", "my_user", "my_password", "world");

/* check connection */
if ($mysqli->connect_errno) {
    printf("Connect failed: %s\n", $mysqli->connect_error);
    exit();
}

/* Create table doesn't return a resultset */
if ($mysqli->query("CREATE TEMPORARY TABLE myCity LIKE City") === TRUE) {
    printf("Table myCity successfully created.\n");
}

/* Select queries return a resultset */
if ($result = $mysqli->query("SELECT Name FROM City LIMIT 10")) {
    printf("Select returned %d rows.\n", $result->num_rows);

    /* free result set */
    $result->close();
}

/* If we have to retrieve large amount of data we use MYSQLI_USE_RESULT */
if ($result = $mysqli->query("SELECT * FROM City", MYSQLI_USE_RESULT)) {

    /* Note, that we can't execute any functions which interact with the
       server until result set was closed. All calls will return an
       'out of sync' error */
    if (!$mysqli->query("SET @a:='this will not work'")) {
        printf("Error: %s\n", $mysqli->error);
    }
    $result->close();
}

$mysqli->close();

如何在输入框输入数据的同时，在PHP中进行SQL注入？

How to perform SQL injection in PHP while inputting the data in input box?

php

mysql

sql-injection