SQL注入绕过字段固定值限制
WeChall上的一道题目 链接 Addslashes (Exploit, PHP, MySQL) Your mission is to login as Admin. You are given the source of the login script also as highlighted version. Good Luck. 题目给出了源码 <?php function asvsmysql_login($username, $password) { $username = addslashes($username); $password = md5($password); if (false === ($db = gdo_db_instance('localhost', ADDSLASH_USERNAME, ADDSLASH_PASSWORD, ADDSLASH_DATABASE, GWF_DB_TYPE, 'GBK')))...