通过inser into进行注入

需要有mysql_error()反馈信息

http://blog.csdn.net/ysynhtt/article/details/45115849
http://websec.ca/kb/sql_injection
http://www.exploit-db.com/wp-content/themes/exploit/docs/33253.pdf