收到一封这样的邮件

[iwantmoree]

几年前用过 sqli-labs 作为学习用，但没弄明白，所以不了了之 前天收到一份这样的邮件，跟密码有关的 应该重视吗？

SETTING UP THE DATABASE SCHEMA AND POPULATING DATA IN TABLES:

\n";} else {echo "[]...................Error purging database: " . mysql_error(); echo " \n";} //Creating new database security $sql="CREATE database security CHARACTER SET gbk "; if (mysql_query($sql)) {echo "[]...................Creating New database 'SECURITY' successfully";echo " \n";} else {echo "[]...................Error creating database: " . mysql_error();echo " \n";} //creating table users $sql="CREATE TABLE security.users (id int(3) NOT NULL AUTO_INCREMENT, username varchar(20) NOT NULL, password varchar(20) NOT NULL, PRIMARY KEY (id))"; if (mysql_query($sql)) {echo "[]...................Creating New Table 'USERS' successfully";echo " \n";} else {echo "[]...................Error creating Table: " . mysql_error();echo " \n";} //creating table emails $sql="CREATE TABLE security.emails ( id int(3)NOT NULL AUTO_INCREMENT, email_id varchar(30) NOT NULL, PRIMARY KEY (id) )"; if (mysql_query($sql)) {echo "[]...................Creating New Table 'EMAILS' successfully"; echo " \n";} else {echo "[]...................Error creating Table: " . mysql_error();echo " \n";} //creating table uagents $sql="CREATE TABLE security.uagents ( id int(3)NOT NULL AUTO_INCREMENT, uagent varchar(256) NOT NULL, ip_address varchar(35) NOT NULL, username varchar(20) NOT NULL, PRIMARY KEY (id) )"; if (mysql_query($sql)) {echo "[]...................Creating New Table 'UAGENTS' successfully";echo " \n";} else {echo "[]...................Error creating Table: " . mysql_error();echo " \n";} //creating table referers $sql="CREATE TABLE security.referers ( id int(3)NOT NULL AUTO_INCREMENT, referer varchar(256) NOT NULL, ip_address varchar(35) NOT NULL, PRIMARY KEY (id) )"; if (mysql_query($sql)) {echo "[]...................Creating New Table 'REFERERS' successfully";echo " \n";} else {echo "[]...................Error creating Table: " . mysql_error();echo " \n";} //inserting data $sql="INSERT INTO security.users (id, username, password) VALUES ('1', 'Dumb', 'Dumb'), ('2', 'Angelina', 'I-kill-you'), ('3', 'Dummy', 'p@ssword'), ('4', 'secure', 'crappy'), ('5', 'stupid', 'stupidity'), ('6', 'superman', 'genious'), ('7', 'batman', 'mob!le'), ('8', 'admin', 'admin'), ('9', 'admin1', 'admin1'), ('10', 'admin2', 'admin2'), ('11', 'admin3', 'admin3'), ('12', 'dhakkan', 'dumbo'), ('14', 'admin4', 'admin4')"; if (mysql_query($sql)) {echo "[]...................Inserted data correctly into table 'USERS'";echo "

I think you have to check the password which you have given to the mysql and in the sqli-labs folder under db creds file

[iwantmoree]

别沉