?myord=1
Database error: Invalid SQL: select * from au_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20
MySQL Error: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\' desc limit 0,20' at line 1)
#0 dbbase_sql->halt(Invalid SQL: select * from au_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20) called at [D:\wwwroot\autosite\wwwroot\includes\db.inc.php:54] #1 dbbase_sql->query(select * from {P}_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20) called at [D:\wwwroot\autosite\wwwroot\down\module\DownQuery.php:105] #2 DownQuery() called at [D:\wwwroot\autosite\wwwroot\includes\common.inc.php:551] #3 printpage() called at [D:\wwwroot\autosite\wwwroot\down\class\index.php:11]
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in D:\wwwroot\autosite\wwwroot\includes\db.inc.php on line 61
通过注入 取得用户名和密码hash 顺利进入后台
我就不进一步了..
作者：数据流
，www.xuhantao.com，涛涛电脑知识网
