所需系統:
本地os:win10
服務端os:centos7
使用到的工具
xftp7(上傳文件)下載鏈接:https://www.netsarang.com/zh/downloading/?token=QlQxZlpkX2k1bkcySFFmT2h3amFOUUBueE8wcUNmYVZtaXNEbDZMX3N5Nnd3
sqli-labs
下載:https://github.com/Audi-1/sqli-labs
使用LNMP_
web集成開發環境,LNMP
安裝
LNMP安裝教程:https://lnmp.org/install.html
lnmp安裝完成后會提示MySQL密碼,默認是安裝時候輸入的root
密碼:
MySQL/MariaDB root password: yourrootpassword
然后默認安裝,等待即可,出現下圖說明安裝完成。

將下載好的sqli-labs-master
文件上傳到/home/wwwroot/default/
目錄
解壓縮上傳的文件:
unzip sqli-labs-master
修改SQL連接密碼
cd /home/wwwroot/default/sqli-labs-master/sql-connections
修改此目錄下的db-creds.inc
文件
1 <?php 2 3 //give your mysql connection username n password 4 $dbuser ='root'; 5 $dbpass ='yourrootpassword'; 6 $dbname ="security"; 7 $host = 'localhost'; 8 $dbname1 = "challenges"; 9 10 11 12 ?>
接着運行setup-db.php
:
php setup-db.php
運行失敗,提示:
PHP Warning: mysql_connect(): Access denied for user 'root'@'localhost' (using password: YES) in /home/wwwroot/default/sqlilabs/sql-connections/setup-db.php on line 29 [*]...................Could not connect to DB, check the creds in db-creds.inc: Access denied for user 'root'@'localhost' (using password: YES) 切換到root用戶,還是運行失敗。
解決方法:
修改MySQL密碼:
mysql -uroot -p
接着輸入密碼,
mysql> use mysql; mysql> UPDATE user SET password=PASSWORD('mypassword') WHERE user='root'; mysql> FLUSH PRIVILEGES; mysql> quit;
再一次php setup-db.php
:
················省略 [*]...................Old database 'SECURITY' purged if exists<br><br> [*]...................Creating New database 'SECURITY' successfully<br><br> [*]...................Creating New Table 'USERS' successfully<br><br> [*]...................Creating New Table 'EMAILS' successfully<br><br> [*]...................Creating New Table 'UAGENTS' successfully<br><br> [*]...................Creating New Table 'REFERERS' successfully<br><br> [*]...................Inserted data correctly into table 'USERS'<br><br> [*]...................Inserted data correctly into table 'EMAILS'<br><br> ················省略 [*]...................Old database purged if exists<br><br> [*]...................Creating New database successfully<br><br> ················省略 [*]...................Creating New Table 'DCZUIX6QIR' successfully<br><br> [*]...................Inserted data correctly into table 'DCZUIX6QIR'<br><br> [*]...................Inserted secret key 'secret_Z1FL' into table <br><br> ················省略
結果如下圖: