为了练习SQL注入操作，我们可以自己构造注入点来进行测试；之前本站发布过关于ASP注入点，ASPX注入点构造的文章，今天补上PHP的，喜欢的拿去玩。

构造ASP注入点：

http://www.waitalone.cn/construct-asp-injection-point.html

构造ASPX注入点：

http://www.waitalone.cn/structure-aspx-injection.html

PHP注入点构造实例代码

<?php
/**
 * create database sqlinject;
 * 
 * use sqlinject;
 * 
 * create table admin(
 * id int auto_increment primary key,
 * username varchar(32) not null,
 * password varchar(32) not null
 * );
 * 
 * insert into admin (username,password) values ('admin',md5('admin')),('safe',md5('12345')),('test',md5('test'));
 */
$db_host = 'localhost';
$db_user = 'root';
$db_pass = 'waitalone.cn';
$id = $_REQUEST['id'];

$link = mysql_connect($db_host, $db_user, $db_pass) or die("DB Connect Error：" . mysql_error());
mysql_select_db('sqlinject', $link) or die("Can\'t use sqlinject：" . mysql_error());
$sql = "SELECT * FROM admin WHERE id=$id";
$query = mysql_query($sql) or die("Invalid Query：" . mysql_error());
while ($row = mysql_fetch_array($query))
{
    echo "用户ID：" . $row['id'] . "<br>";
    echo "用户账号：" . $row['username'] . "<br>";
    echo "用户密码：" . $row['password'] . "<br>";
} 
mysql_close($link);

echo "当前查询语句：".$sql."<br>";
?>

更多PHP漏洞研究的资料，请下载dvwa汉化版：

http://www.waitalone.cn/anchiva-dvwa.html