将SQL查询注入PHP代码

Question

如何将以下内容注入PHP？该页面不会加载以下代码。

＆＃13;

＆＃13;

                    $result = mysql_query("INSERT INTO phpn_banned_ip (ip_address, reason)
SELECT host_addr, "Spam" FROM phpn_session
WHERE guest='1';");

＆＃13;

＆＃13;

＆＃13;

Answer 1

$result = mysql_query("INSERT INTO phpn_banned_ip (ip_address, reason)
SELECT host_addr, "Spam" FROM phpn_session
WHERE guest='1';");

更改为：

$result = mysql_query("INSERT INTO phpn_banned_ip (ip_address, reason)
SELECT host_addr, 'Spam' FROM phpn_session
WHERE guest='1';");

（更改为围绕垃圾邮件的单引号）