当前位置:网站首页>关于davwa的SQL注入时报错:Illegal mix of collations for operation ‘UNION‘原因剖析与验证
关于davwa的SQL注入时报错:Illegal mix of collations for operation ‘UNION‘原因剖析与验证
2022-06-27 19:49:00 【dfzy$_$】
项目场景:
在进行dvwa靶场注入时,发现出现这里出现了一些bug:Illegal mix of collations for operation ‘UNION’
经过查询与验证后,解决并分析了这一问题。
原因分析:
之所以会出现这个情况,是union两端的字段的collatie(排序规则)不同。即dvwa的first_name与last_name字符校对格式与information_schema的发生了冲突:


解决方案:
我们需要将dvwa中的校对规则进行修改,让其与information中的一致,即改成utf8_general_ci:
alter table users modify first_name varchar(15) character set utf8 collate utf8_general_ci
alter table users modify last_name varchar(15) character set utf8 collate utf8_general_ci
alter table users modify user varchar(15) character set utf8 collate utf8_general_ci
alter table users modify password varchar(15) character set utf8 collate utf8_general_ci
此时,就可以解决了:

边栏推荐
- BAT测试专家对web测试和APP测试的总结
- I think I should start writing my own blog.
- Luogu p5706 redistributing fertilizer and house water
- QT base64 encryption and decryption
- It smells good. Since I used Charles, Fiddler has been completely uninstalled by me
- Read write separation master-slave replication of MySQL
- Use Fiddler to simulate weak network test (2g/3g)
- Codeforces Round #717 (Div. 2)
- [LeetCode]515. 在每个树行中找最大值
- Bean paste green protects your eyes
猜你喜欢

年薪50W+的测试大鸟都在用这个:Jmeter 脚本开发之——扩展函数
![\w和[A-Za-z0-9_],\d和[0-9]等价吗?](/img/96/2649c9cf95b06887b57fd8af2d41c2.png)
\w和[A-Za-z0-9_],\d和[0-9]等价吗?

使用Jmeter进行性能测试的这套步骤,涨薪2次,升职一次

Go from introduction to actual combat - execute only once (note)

百万年薪独家专访,开发人员不修复bug怎么办?
![[LeetCode]动态规划解分割数组II[Arctic Fox]](/img/a1/4644206db3e14c81f9f64e4da046bf.png)
[LeetCode]动态规划解分割数组II[Arctic Fox]

读写分离-Mysql的主从复制

01 golang environment construction

管理系统-ITclub(下)
![[LeetCode]动态规划解拆分整数I[Silver Fox]](/img/18/8dc8159037ec1262444db8899cde0c.png)
[LeetCode]动态规划解拆分整数I[Silver Fox]
随机推荐
Summary of gbase 8A database user password security related parameters
Professor of Tsinghua University: software testing has gone into a misunderstanding - "code is necessary"
xpath
Test birds with an annual salary of 50w+ are using this: JMeter script development -- extension function
畅游动态规划之区间DP
Remote invocation of microservices
年薪50W+的测试大鸟都在用这个:Jmeter 脚本开发之——扩展函数
清华大学教授:软件测试已经走入一个误区——“非代码不可”
Quick excel export
Windwos 8.1系统安装vmware tool插件报错的解决方法
GBase 8a V8版本节点替换期间通过并发数控制资源使用减少对系统影响的方法
美团20k软件测试工程师的经验分享
[LeetCode]508. The most frequent subtree elements and
[LeetCode]100. 相同的树
真香,自从用了Charles,Fiddler已经被我彻底卸载了
Dynamic refresh mapper
[LeetCode]动态规划解拆分整数I[Silver Fox]
Oracle migration MySQL unique index case insensitive don't be afraid
[leetcode] dynamic programming solution partition array ii[arctic fox]
哈希表-数组之和