You are here: hacking technology > hacker course > Content
Hot Articles
Recommend Articles
New Articles
Union inquires the small skill
  Add date: 07/09/2008   Publishing date: 07/09/2008   Hits: 24
Total 2 pages, Current page:1, Jump to page:
 

Believed that everybody has not used little the union inquiry in injection, ha-ha. Indeed the union inquiry is very convenient, did not need a character to meet a character to guess, enhanced greatly has lived the factory strength, however because its condition request were time also many could not be completely satisfied, often at that time on only then looks pours into the spot, roared howlingly, had the whole face grief and indignation to start to use the most primitive method. Certainly, the condition does not allow us also not to have the means that however some time is actually own causes the high efficiency the union inquiry method not to use careless, this may not tally “three represents” “to represent the most advanced productive forces”. The following needs to speak of possibly is one kind of situation. ^_^ (trust many friends already had known, is only I on-line has not seen, here raises, and while away the time oneself, talks nonsense primarily)

mysql> select * from test; +------+----------+----------+ | id   | username | password | +------+----------+----------+ |    1 | admin    | admin888 | +------+----------+----------+ 1 row in set (0.03 sec)
mysql> select * from test; <br/>+------+----------+----------+<br/>| id   | username | password |<br/>+------+----------+----------+<br/>|    1 | admin    | admin888 |<br/>+------+----------+----------+<br/>1 row in set (0.03 sec)
test.php:

<?    $id=$_GET ['id'];    $lnk = mysql_connect ('localhost', 'root', 'root') or die ('Not connected: '. mysql_error());    mysql_select_db ('test', $lnk) or die ('Can \ 't use foo: '. mysql_error());    $query = “SELECT count(*) FROM test where id=$id”;    $result = mysql_query($query);    while ($result_row = mysql_fetch_row($result))    {        if(($result_row[0])&&is_numeric($result_row[0])) {             echo $result_row[0];        }    }    ? >  
<?   <br/>$id=$_GET ['id'];   <br/>$lnk = mysql_connect ('localhost', 'root', 'root') or die ('Not connected: '. mysql_error());   <br/>mysql_select_db ('test', $lnk) or die ('Can \ 't use foo: '. mysql_error());   <br/>$query = “SELECT count(*) FROM test where id=$id”;   <br/>$result = mysql_query($query);   <br/>while ($result_row = mysql_fetch_row($result))   <br/> {   <br/>    if(($result_row[0])&&is_numeric($result_row[0])) {   <br/>         echo $result_row[0];   <br/>    }   <br/>}   <br/>? >  

 

Other pages: : 1 * 2 * Next>>
Prev:The new military recruits take WebShell the experience Next:MYSQL database injection essence

Comment:

Category: Home > hacker course