0x00 原理 网站使用正则匹配对用户名一栏传到服务器的参数进行了匹配,如果匹配到了单引号则报错 0x01 简单例子 当我们输入admin'时,网站直接报错,很有可能就是用了正则,这样我们也不用考虑别的什么绕过方式了. 猜测服务端数据查询语句 select id from users where username='$user' and password='$password'; 所以如果我们设$user=admin\的话,查询语句就变成了 select id from users wh
1.cursor传入参数 定义:cursor [cursor变量名称]([参数名称] [参数类型]) IS [SQL语句,可以使用传入参数] 例子: cursor moTypeNames(domain VARCHAR2) IS select t1.modelname from pm4h_mo.mdl_resmodel t1,pm4h_mo.mdl_domain t2 where t2.domainname=domain and t1.domainid = t
13. View the Exhibit and examine the structure of the PRODUCTS table. You need to generate a report in the following format: CATEGORIES 5MP Digital Photo Camera's category is Photo Y Box's category is Electronics Envoy Ambassador's category is Hardwa