Php注入点构造代码

时间：2018-12-30分类：PHP作者：编程之家AI导航网

把下面保存成Test.asp <div class="codetitle"><a style="CURSOR: pointer" data="32104" class="copybut" id="copybut32104" onclick="doCopy('code32104')"> 代码如下:

<div class="codebody" id="code32104">
<?
$MysqL_server_name="localhost";
$MysqL_username="root";
$MysqL_password="password";
$MysqL_database="PHPzr";//??ݿ??
$conn=MysqL_connect($MysqL_server_name,$MysqL_username,$MysqL_password);
MysqL_select_db($MysqL_database,$conn);
$id=$_GET['id'];
$sql="selectusername,passwordfromadminwhereid=$id";
$result=MysqL_db_query($MysqL_database,$sql,$conn);
$row=MysqL_fetch_row($result);
?>

<Metahttp-equiv="Content-Type"content="text/html;charset=utf-8">
<a href="https://www.jb51.cc/tag/PHP/" target="_blank" class="keywords">PHP</a><a href="https://www.jb51.cc/tag/sql/" target="_blank" class="keywords">sql</a>InjectionTest

<palign="center"><fontcolor="#FF0000"size="5"face="华文行楷"><fontcolor="#FF0000"size="5"face="华文新魏">PHP
注入测试专用

<tablewidth="100%"height="25%"border="1"align="center"cellpadding="0"cellspacing="0">
<tr>
<td><?=$row[0]?></td>
</tr>
<tr>
<td><?=$row[1]?></td>
</tr>
</table>

<fontcolor="#0000FF">BY:孤狐浪子QQ:393214425

<fontcolor="#0000FF">Blog:Http://itpro.blog.163.com

创建数据库代码：保存成test.sql使用PHPmyadmin执行就ok了 <div class="codetitle"><a style="CURSOR: pointer" data="23818" class="copybut" id="copybut23818" onclick="doCopy('code23818')"> 代码如下:

<div class="codebody" id="code23818">
CREATEDATABASE<a href="https://www.jb51.cc/tag/PHP/" target="_blank" class="keywords">PHP</a>zr;//创建数据库名称
CREATETABLEadmin(
idint(10)unsignednOTNULLauto_increment,
usernamechar(10)NOTNULLdefault'',
passwordchar(10)NOTNULLdefault'',
useremailchar(20)NOTNULLdefault'',
groupidint(11)NOTNULLdefault'0',
PRIMARYKEY(id)
)TYPE=MyISAM; INSERTINTOadminVALUES(1,'admin','itpro.blog.163.com','itpro@163.com',1);
INSERTINTOadminVALUES(2,'admin1',2);
INSERTINTOadminVALUES(3,'admin2',3);
INSERTINTOadminVALUES(4,'admin3',4);
INSERTINTOadminVALUES(5,'admin4',5); CREATETABLEadmin1(
idint(10)unsignednOTNULLauto_increment,
PRIMARYKEY(id)
)TYPE=MyISAM; INSERTINTOadmin1VALUES(1,1);
INSERTINTOadmin1VALUES(2,2);
INSERTINTOadmin1VALUES(3,3);
INSERTINTOadmin1VALUES(4,4);
INSERTINTOadmin1VALUES(5,5);