当前位置:Gxlcms > 数据库问题 > Mysql Order By注入总结

Mysql Order By注入总结

时间:2021-07-01 10:21:17 帮助过:17人阅读

error_reporting(0); session_start(); mysql_connect("127.0.0.1", "root", "root") or die("Database connection failed "); mysql_select_db("sqlidemo") or die("Select database failed"); $order = $_GET[‘order‘] ? $_GET[‘order‘] : ‘name‘; $sql = "select id,name,price from goods order by $order"; $result = mysql_query($sql); $reslist = array(); while($row = mysql_fetch_array($result, MYSQL_ASSOC)) { array_push($reslist, $row); } echo json_encode($reslist);
  1. <code class="hljs language-sql" style="font-size: 0.85em; font-family: Consolas, Inconsolata, Courier, monospace; margin: 0px 0.15em; padding: 0.5em; white-space: pre; border: 1px solid #cccccc; background-color: #f8f8f8; display: block; overflow: auto; color: #333333; background: #f8f8f8">
  2. <span class="hljs-operator"><span class="hljs-keyword" style="color: #333333; font-weight: bold">create</span> <span class="hljs-keyword" style="color: #333333; font-weight: bold">database</span> sqlidemo;</span>
  3. <span class="hljs-operator"><span class="hljs-keyword" style="color: #333333; font-weight: bold">use</span> sqlidemo;</span>
  4. <span class="hljs-operator"><span class="hljs-keyword" style="color: #333333; font-weight: bold">create</span> <span class="hljs-keyword" style="color: #333333; font-weight: bold">table</span> goods (id <span class="hljs-built_in" style="color: #0086b3">int</span>(<span class="hljs-number" style="color: #008080">4</span>) <span class="hljs-keyword" style="color: #333333; font-weight: bold">not</span> <span class="hljs-literal">null</span> <span class="hljs-keyword" style="color: #333333; font-weight: bold">primary</span> <span class="hljs-keyword" style="color: #333333; font-weight: bold">key</span> auto_increment, name <span class="hljs-built_in" style="color: #0086b3">char</span>(<span class="hljs-number" style="color: #008080">32</span>) <span class="hljs-keyword" style="color: #333333; font-weight: bold">not</span> <span class="hljs-literal">null</span>, price <span class="hljs-built_in" style="color: #0086b3">int</span>(<span class="hljs-number" style="color: #008080">4</span>) <span class="hljs-keyword" style="color: #333333; font-weight: bold">not</span> <span class="hljs-literal">null</span>);</span>
  5. <span class="hljs-operator"><span class="hljs-keyword" style="color: #333333; font-weight: bold">insert</span> <span class="hljs-keyword" style="color: #333333; font-weight: bold">into</span> goods (name, price) <span class="hljs-keyword" style="color: #333333; font-weight: bold">values</span>(<span class="hljs-string" style="color: #dd1144">"apple"</span>, <span class="hljs-number" style="color: #008080">10</span>);</span>
  6. <span class="hljs-operator"><span class="hljs-keyword" style="color: #333333; font-weight: bold">insert</span> <span class="hljs-keyword" style="color: #333333; font-weight: bold">into</span> goods (name, price) <span class="hljs-keyword" style="color: #333333; font-weight: bold">values</span>(<span class="hljs-string" style="color: #dd1144">"banana"</span>, <span class="hljs-number" style="color: #008080">15</span>);</span>
  7. <span class="hljs-operator"><span class="hljs-keyword" style="color: #333333; font-weight: bold">insert</span> <span class="hljs-keyword" style="color: #333333; font-weight: bold">into</span> goods (name, price) <span class="hljs-keyword" style="color: #333333; font-weight: bold">values</span>(<span class="hljs-string" style="color: #dd1144">"peach"</span>, <span class="hljs-number" style="color: #008080">20</span>);</span>
  8. </code>

参考

http://xdxd.love/2016/03/07/order-by%E6%B3%A8%E5%85%A5%E7%82%B9%E5%88%A9%E7%94%A8%E6%96%B9%E5%BC%8F/
https://dev.mysql.com/doc/refman/5.7/en/control-flow-functions.html
https://dev.mysql.com/doc/refman/5.7/en/string-functions.html

?

Mysql Order By注入总结

标签:ima   for   auto   基于   rem   schema   tar   大量   column   

人气教程排行