5up3rh3i'blog［提供有偿web代码安全审计服务］

版权声明：转载时请以超链接形式标明文章原始出处和作者信息及本声明
http://superhei.blogbus.com/logs/20736510.html

今天某大牛说mysql可以用sleep进行时间差注射,我记得以前没有sleep()的,官方看了一下:

http://dev.mysql.com/doc/refman/5.0/en/miscellaneous-functions.html#function_sleep

SLEEP(duration)

Sleeps (pauses) for the number of seconds given by the duration argument, then returns 0. If SLEEP() is interrupted, it returns 1. The duration may have a fractional part given in microseconds. This function was added in MySQL 5.0.12.

5.012加上的 :).