A question of SQL statement injected by SQL


SQL:
select * from post where id = "10";

:
10" union select id,username,salt,password,5 from user where id="2

:
select * from post where id = "10\" union select id,username,salt,password,5 from user where id=\"2"

I don"t know why I can query the data.

clipboard.png

Php mysql
Mar.15,2021

your id MYSQL setting is numeric, but you are querying character types. At this point, MYSQL does an implicit conversion and does not use indexes. Where characters are converted to numbers:

  1. start processing from the left
    2. The
  2. string begins with a non-numeric number and is converted to the number 0
    3. The
  3. string begins with a number and is directly intercepted to a non-numeric position. Which is in your question: 10
Implicit conversion occurs during the execution of

sql statement

Previous: Andorid load gif picture does not display

Next: Vue import variable from path, why is the path preceded by @?

css mysql arrays josn react html typescript webpack npm sass R objective-c .net sql-server jquery python-3.x angularjs django angular excel regex iphone ajax linux xml pandas vba spring database wordpress string wpf xcode windows bash postgresql oracle multithreading eclipse list firebase algorithm macos forms image scala visual-studio azure bootstrap spring-boot react-native python-2.7 docker performance function winforms matlab powershell apache dataframe api sqlite numpy rest shell selenium flutter dart maven loops qt swing android-studio csv express file class tensorflow sorting codeigniter perl
© 2021 CodesHelper
Advertising Contact us About us
Menu