moyin/fzu-product
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

style: html to md syntax

Browse Source
This commit is contained in:
Plumbiu
2023-08-24 10:31:27 +08:00
parent 229e847514
commit 0a96f3658b
88 changed files with 459 additions and 459 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
6.计算机安全/6.1.1SQL 注入.md
View File

@@ -168,7 +168,7 @@ mysql> select group_concat(id,username separator '_') from users;
![](https://cdn.xyxsw.site/boxcniDohuM3F8FbMqz7YSC0Y5g.png)
<strong>真是惊人的壮举！我完全不认识这个叫 Liki5 的家伙，但我居然知道了他的密码对应的哈希值！</strong>
**真是惊人的壮举！我完全不认识这个叫 Liki5 的家伙，但我居然知道了他的密码对应的哈希值！**
<del>那么到这里 SQL 注入你就已经完全学会了，接下来做一些小练习吧。</del>
@@ -787,8 +787,8 @@ INSERT 语句也被成功执行了，向数据库中插入了 Liki3 的数据
因此，从 MySQL 5.6.x 开始，有了取代 `information_schema` 的表名查询方式，如下所示
```python
select table_name from mysql.innodb_index_stats where database_name=<em>database</em>();
select table_name from mysql.innodb_table_stats where database_name=<em>database</em>();
select table_name from mysql.innodb_index_stats where database_name=*database*();
select table_name from mysql.innodb_table_stats where database_name=*database*();
```
![](https://cdn.xyxsw.site/boxcnbMtjAq8osStjcSbFuIdDSc.png)
@@ -804,8 +804,8 @@ select table_name from mysql.innodb_table_stats where database_name=<em>database
其中就包含了存储数据库和对应的数据表，于是就有了如下的表名查询方式
```sql
select table_name from sys.schema_table_statistics_with_buffer where table_schema=<em>database</em>();
select table_name from sys.x$schema_table_statistics_with_buffer where table_schema=<em>database</em>();
select table_name from sys.schema_table_statistics_with_buffer where table_schema=*database*();
select table_name from sys.x$schema_table_statistics_with_buffer where table_schema=*database*();
```
![](https://cdn.xyxsw.site/boxcnV68mdIQmovJwczDsOc53gc.png)