SQL注入系列----基础篇

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

-- 这是一行注释
# 这是另一行注释

grant all on *.* to username@"host" IDENTIFIED by "password";-- mysql5.x版本

#create user test@"host" IDENTIFIED by "password" with_native_password; -- mysql8.x版本,需要另外创建用户，才能授权

-- 列出所有的数据库
show databases;

-- 查看某一个数据库里所有的表
use databasename;
use mysql;
SHOW TABLES;

SHOW tables FROM mysql;

-- SELECT,问题，docker创建mysql时要指定时区,
-- 特殊应用
SELECT NOW();
SELECT 1 + 1;

use information_schema;
-- 查看我们当前使用的库是哪个库
SELECT DATABASE();
-- 查看版本
SELECT VERSION();
-- 查看当前登录数据库的用户
SELECT user();
-- 查看数据路径
SELECT @@datadir;
-- 查看mysql安装路径
SELECT @@basedir;
-- 查看mysql安装的系统
SELECT @@version_compile_os;

-- 查询数据

SELECT * from mysql.user;
SELECT user,host from mysql.user;

-- show database
SHOW DATABASE;
SELECT SCHEMA_NAME from information_schema.schemata;

SELECT * from information_schema.schemata;
SELECT * FROM information_schema.tables;
SELECT * from information_schema.`COLUMNS`;

-- where条件
SELECT user,`Host` from mysql.user;
SELECT user,host from mysql.user where user='root';
SELECT user,host from mysql.user where host='%';

-- 创建库
CREATE DATABASE test CHARSET utf8mb4;

use test;
CREATE TABLE t1(id int);
drop TABLE t1;

ALTER TABLE t1 ADD name VARCHAR(32);
DESC t1;

INSERT INTO t1 VALUES (1,'张三'),(2,'李四'),(3,'王五');

SELECT * FROM t1;

SELECT DATABASE();

SELECT * from information_schema.TABLES WHERE table_schema='test';
SELECT * from information_schema.`COLUMNS` WHERE TABLE_schema='test';

-- where and or
SELECT * from t1 WHERE name='张三' and 1=1; #与不写and一致
SELECT * from t1 WHERE name='张三' or 1=1; #与不写where一致

-- union
SELECT * from test.t1 union SELECT 1,2;
SELECT user,host FROM mysql.user UNION SELECT * from test.t1;