来到select正则：
|
1
|
<.+javascript:window[.{1}\x|<.*=(&#d+?;?)+?>|<.*(data|src)=data:text/html.*>|(alert(|confirm(|expression(|prompt(|benchmarks*?(.*)|sleeps*?(.*)|load_files*?()|<[a-z]+?[^>]*?on([a-z]{4,})s*?=|^+/v(8|9)|(and|or)s*?([()'"d]+?=[()'"d]+?|[()'"a-zA-Z]+?=[()'"a-zA-Z]+?|>|<|s+?[w]+?s+?ins*?(|likes+?["'])|/*.**/|<s*script|EXEC|UNION.+?SELECT@{0,2}((.+)|s+?.+?|(`|'|").*?(`|'|"))|UPDATE@{0,2}((.+)|s+?.+?|(`|'|").*?(`|'|"))SET|INSERTs+INTO.+?VALUES|(SELECT|DELETE)@{0,2}((.+)|s+?.+?s+?|(`|'|").*?(`|'|"))FROM((.+)|s+?.+?|(`|'|").*?(`|'|"))|(CREATE|ALTER|DROP|TRUNCATE)s+(TABLE|DATABASE)|/*.*?*/|' |
Bypass：
union select@1,2,3,4,5,6,7
union select@1=@1,2,3,4,5,6,7
insert正则部分：
|
1
|
INSERTs+INTO.+?(VALUES|SET) |
Bypass：
insert into t set cmd=123