Bypass php is_numeric() function is possible?
问题 I am currently looking for a pass (not blind) high level of category sql injection application dvwa. Can not find the solution even if there are some ideas and tools that make life easier. source code form is as follows for the fans: if (isset($_GET['Submit'])) { // Retrieve data $id = $_GET['id']; $id = stripslashes($id); $id = mysql_real_escape_string($id); if (is_numeric($id)){ $getid = "SELECT first_name, last_name FROM users WHERE user_id = '$id'"; $result = mysql_query($getid) or die('