1. 程式人生 > >mysql buglist上關於SQL子查詢注入的郵件列表

mysql buglist上關於SQL子查詢注入的郵件列表

[11 Aug 2016 15:38] Sinisa Milivojevic
Hi!

You are using rand() in both a select list and in the group list. That can create huge runtime problems. How does this work:

select count(*), concat(version(),floor(rand(0)*2)),  concat(2,floor(rand(0)*2))  as xxx from
information_schema.tables group by xxx;