邪恶八进制信息安全团队技术讨论组's Archiver

NetKnave 2007-10-6 16:30

[讨论]mysql INTO OUTFILE导出/中文路径报错

议题作者：NetKnave
信息来源：邪恶八进制信息安全团队（[url]www.eviloctal.com[/url]）

[code]SELECT config_value INTO OUTFILE 'E:/wwwroot/abc/aaaa.php' FROM php_config where config_name='names';[/code]
正常

[code]SELECT config_value INTO OUTFILE 'E:/wwwroot/中文路径/aaaa.php' FROM php_config where config_name='names';
[/code]
报错

pt007 2007-10-6 21:10

把中文路径转换成unicode码试试

pub!1c 2007-10-6 22:34

select hex("E:/wwwroot/中文路径/aaaa.php")
hex = 453A2F777777726F6F742FE4B8ADE69687E8B7AFE5BE842F616161612E706870

0x453A2F777777726F6F742FE4B8ADE69687E8B7AFE5BE842F616161612E706870

SELECT config_value INTO OUTFILE '0x453A2F777777726F6F742FE4B8ADE69687E8B7AFE5BE842F616161612E706870' FROM php_config where config_name='names';  既可

28度的冰 2007-10-7 15:31

url encode

javascript:escape();

shunyuncc 2007-10-8 10:00

SELECT config_value INTO OUTFILE 0x453A2F777777726F6F742F4E2D65878DEF5F842F616161612E706870 FROM php_config where config_name='names';

NetKnave 2007-10-8 14:27

[quote]引用第2楼ring04h于2007-10-06 22:34发表的 :
select hex("E:/wwwroot/中文路径/aaaa.php")
hex = 453A2F777777726F6F742FE4B8ADE69687E8B7AFE5BE842F616161612E706870

0x453A2F777777726F6F742FE4B8ADE69687E8B7AFE5BE842F616161612E706870

.......[/quote]

mysql 6.0 [s:270] hex之后 不报错了。但是。导不出来

select hex("E:/wwwroot/中文路径/aaaa.php")

select hex("E:/wwwroot/test/aaaa.php")

都导不出来[s:264]

28度的冰 2007-10-8 21:49

有什么报错提示吗？目录不可写吧

hackest 2007-10-10 11:02

貌似表示路径应该用\\（双反斜杠）的哦

jackal 2008-5-21 12:50

set names utf-8
再导出就可以了
是字符的问题.

页: [1]
© 1999-2008 EvilOctal Security Team