突破sql 注入过滤Union+SELECT 继续射下去

http://blog.csdn.net/feier7501/article/details/9748623