diff --git a/src/sqlmap-master/data/xml/errors.xml b/src/sqlmap-master/data/xml/errors.xml
index 4993a8a..44fb48d 100644
--- a/src/sqlmap-master/data/xml/errors.xml
+++ b/src/sqlmap-master/data/xml/errors.xml
@@ -1,240 +1,357 @@
-<?xml version="1.0" encoding="UTF-8"?>
-
-<root>
-    <dbms value="MySQL">
-        <error regexp="SQL syntax.*?MySQL"/>
-        <error regexp="Warning.*?\Wmysqli?_"/>
-        <error regexp="MySQLSyntaxErrorException"/>
-        <error regexp="valid MySQL result"/>
-        <error regexp="check the manual that (corresponds to|fits) your MySQL server version"/>
-        <error regexp="check the manual that (corresponds to|fits) your MariaDB server version" fork="MariaDB"/>
-        <error regexp="check the manual that (corresponds to|fits) your Drizzle server version" fork="Drizzle"/>
-        <error regexp="Unknown column '[^ ]+' in 'field list'"/>
-        <error regexp="MySqlClient\."/>
-        <error regexp="com\.mysql\.jdbc"/>
-        <error regexp="Zend_Db_(Adapter|Statement)_Mysqli_Exception"/>
-        <error regexp="Pdo[./_\\]Mysql"/>
-        <error regexp="MySqlException"/>
-        <error regexp="SQLSTATE\[\d+\]: Syntax error or access violation"/>
-        <error regexp="MemSQL does not support this type of query" fork="MemSQL"/>
-        <error regexp="is not supported by MemSQL" fork="MemSQL"/>
-        <error regexp="unsupported nested scalar subselect" fork="MemSQL"/>
-    </dbms>
-
-    <dbms value="PostgreSQL">
-        <error regexp="PostgreSQL.*?ERROR"/>
-        <error regexp="Warning.*?\Wpg_"/>
-        <error regexp="valid PostgreSQL result"/>
-        <error regexp="Npgsql\."/>
-        <error regexp="PG::SyntaxError:"/>
-        <error regexp="org\.postgresql\.util\.PSQLException"/>
-        <error regexp="ERROR:\s\ssyntax error at or near"/>
-        <error regexp="ERROR: parser: parse error at or near"/>
-        <error regexp="PostgreSQL query failed"/>
-        <error regexp="org\.postgresql\.jdbc"/>
-        <error regexp="Pdo[./_\\]Pgsql"/>
-        <error regexp="PSQLException"/>
-    </dbms>
-
-    <dbms value="Microsoft SQL Server">
-        <error regexp="Driver.*? SQL[\-\_\ ]*Server"/>
-        <error regexp="OLE DB.*? SQL Server"/>
-        <error regexp="\bSQL Server[^&lt;&quot;]+Driver"/>
-        <error regexp="Warning.*?\W(mssql|sqlsrv)_"/>
-        <error regexp="\bSQL Server[^&lt;&quot;]+[0-9a-fA-F]{8}"/>
-        <error regexp="System\.Data\.SqlClient\.(SqlException|SqlConnection\.OnError)"/>
-        <error regexp="(?s)Exception.*?\bRoadhouse\.Cms\."/>
-        <error regexp="Microsoft SQL Native Client error '[0-9a-fA-F]{8}"/>
-        <error regexp="\[SQL Server\]"/>
-        <error regexp="ODBC SQL Server Driver"/>
-        <error regexp="ODBC Driver \d+ for SQL Server"/>
-        <error regexp="SQLServer JDBC Driver"/>
-        <error regexp="com\.jnetdirect\.jsql"/>
-        <error regexp="macromedia\.jdbc\.sqlserver"/>
-        <error regexp="Zend_Db_(Adapter|Statement)_Sqlsrv_Exception"/>
-        <error regexp="com\.microsoft\.sqlserver\.jdbc"/>
-        <error regexp="Pdo[./_\\](Mssql|SqlSrv)"/>
-        <error regexp="SQL(Srv|Server)Exception"/>
-        <error regexp="Unclosed quotation mark after the character string"/>
-    </dbms>
-
-    <dbms value="Microsoft Access">
-        <error regexp="Microsoft Access (\d+ )?Driver"/>
-        <error regexp="JET Database Engine"/>
-        <error regexp="Access Database Engine"/>
-        <error regexp="ODBC Microsoft Access"/>
-        <error regexp="Syntax error \(missing operator\) in query expression"/>
-    </dbms>
-
-    <dbms value="Oracle">
-        <error regexp="\bORA-\d{5}"/>
-        <error regexp="Oracle error"/>
-        <error regexp="Oracle.*?Driver"/>
-        <error regexp="Warning.*?\W(oci|ora)_"/>
-        <error regexp="quoted string not properly terminated"/>
-        <error regexp="SQL command not properly ended"/>
-        <error regexp="macromedia\.jdbc\.oracle"/>
-        <error regexp="oracle\.jdbc"/>
-        <error regexp="Zend_Db_(Adapter|Statement)_Oracle_Exception"/>
-        <error regexp="Pdo[./_\\](Oracle|OCI)"/>
-        <error regexp="OracleException"/>
-    </dbms>
-
-    <dbms value="IBM DB2">
-        <error regexp="CLI Driver.*?DB2"/>
-        <error regexp="DB2 SQL error"/>
-        <error regexp="\bdb2_\w+\("/>
-        <error regexp="SQLCODE[=:\d, -]+SQLSTATE"/>
-        <error regexp="com\.ibm\.db2\.jcc"/>
-        <error regexp="Zend_Db_(Adapter|Statement)_Db2_Exception"/>
-        <error regexp="Pdo[./_\\]Ibm"/>
-        <error regexp="DB2Exception"/>
-        <error regexp="ibm_db_dbi\.ProgrammingError"/>
-    </dbms>
-
-    <dbms value="Informix">
-        <error regexp="Warning.*?\Wifx_"/>
-        <error regexp="Exception.*?Informix"/>
-        <error regexp="Informix ODBC Driver"/>
-        <error regexp="ODBC Informix driver"/>
-        <error regexp="com\.informix\.jdbc"/>
-        <error regexp="weblogic\.jdbc\.informix"/>
-        <error regexp="Pdo[./_\\]Informix"/>
-        <error regexp="IfxException"/>
+<?xml version="1.0" encoding="UTF-8"?>  <!-- 声明XML文档的版本和编码方式 -->
+
+<root>  <!-- 定义XML文档的根元素 -->
+    <dbms value="MySQL">  <!-- 定义MySQL数据库管理系统 -->
+        <error regexp="SQL syntax.*?MySQL"/>  <!-- 匹配MySQL语法错误的错误信息 -->
+        <error regexp="Warning.*?\Wmysqli?_"/>  <!-- 匹配MySQLi扩展的警告信息 -->
+        <error regexp="MySQLSyntaxErrorException"/>  <!-- 匹配MySQL语法异常的错误信息 -->
+        <error regexp="valid MySQL result"/>  <!-- 匹配无效的MySQL查询结果的错误信息 -->
+        <error regexp="check the manual that (corresponds to|fits) your MySQL server version"/>  <!-- 匹配与MySQL服务器版本不匹配的错误信息 -->
+        <error regexp="check the manual that (corresponds to|fits) your MariaDB server version" fork="MariaDB"/>  <!-- 匹配与MariaDB服务器版本不匹配的错误信息 -->
+        <error regexp="check the manual that (corresponds to|fits) your Drizzle server version" fork="Drizzle"/>  <!-- 匹配与Drizzle服务器版本不匹配的错误信息 -->
+        <error regexp="Unknown column '[^ ]+' in 'field list'"/>  <!-- 匹配未知列名的错误信息 -->
+        <error regexp="MySqlClient\."/>  <!-- 匹配MySqlClient相关的错误信息 -->
+        <error regexp="com\.mysql\.jdbc"/>  <!-- 匹配MySQL JDBC驱动的错误信息 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Mysqli_Exception"/>  <!-- 匹配Zend框架中MySQLi相关的异常信息 -->
+        <error regexp="Pdo[./_\\]Mysql"/>  <!-- 匹配PDO MySQL驱动的错误信息 -->
+        <error regexp="MySqlException"/>  <!-- 匹配MySQL异常的错误信息 -->
+        <error regexp="SQLSTATE$\d+$: Syntax error or access violation"/>  <!-- 匹配SQL语法错误或访问违规的错误信息 -->
+        <error regexp="MemSQL does not support this type of query" fork="MemSQL"/>  <!-- 匹配MemSQL不支持的查询类型的错误信息 -->
+        <error regexp="is not supported by MemSQL" fork="MemSQL"/>  <!-- 匹配MemSQL不支持的查询类型的错误信息 -->
+        <error regexp="unsupported nested scalar subselect" fork="MemSQL"/>  <!-- 匹配MemSQL不支持的嵌套标量子查询的错误信息 -->
+    </dbms>
+
+    <dbms value="PostgreSQL">  <!-- 定义PostgreSQL数据库管理系统 -->
+        <error regexp="PostgreSQL.*?ERROR"/>  <!-- 匹配PostgreSQL错误信息 -->
+        <error regexp="Warning.*?\Wpg_"/>  <!-- 匹配PostgreSQL扩展的警告信息 -->
+        <error regexp="valid PostgreSQL result"/>  <!-- 匹配无效的PostgreSQL查询结果的错误信息 -->
+        <error regexp="Npgsql\."/>  <!-- 匹配Npgsql驱动的错误信息 -->
+        <error regexp="PG::SyntaxError:"/>  <!-- 匹配PostgreSQL语法错误信息 -->
+        <error regexp="org\.postgresql\.util\.PSQLException"/>  <!-- 匹配PostgreSQL JDBC驱动的异常信息 -->
+        <error regexp="ERROR:\s\ssyntax error at or near"/>  <!-- 匹配PostgreSQL语法错误信息 -->
+        <error regexp="ERROR: parser: parse error at or near"/>  <!-- 匹配PostgreSQL解析错误信息 -->
+        <error regexp="PostgreSQL query failed"/>  <!-- 匹配PostgreSQL查询失败的错误信息 -->
+        <error regexp="org\.postgresql\.jdbc"/>  <!-- 匹配PostgreSQL JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\]Pgsql"/>  <!-- 匹配PDO PostgreSQL驱动的错误信息 -->
+        <error regexp="PSQLException"/>  <!-- 匹配PostgreSQL异常的错误信息 -->
+    </dbms>
+
+    <dbms value="Microsoft SQL Server">  <!-- 定义Microsoft SQL Server数据库管理系统 -->
+        <error regexp="Driver.*? SQL[\-\_\ ]*Server"/>  <!-- 匹配SQL Server驱动的错误信息 -->
+        <error regexp="OLE DB.*? SQL Server"/>  <!-- 匹配OLE DB SQL Server驱动的错误信息 -->
+        <error regexp="\bSQL Server[^&lt;&quot;]+Driver"/>  <!-- 匹配SQL Server驱动的错误信息 -->
+        <error regexp="Warning.*?\W(mssql|sqlsrv)_"/>  <!-- 匹配SQL Server扩展的警告信息 -->
+        <error regexp="\bSQL Server[^&lt;&quot;]+[0-9a-fA-F]{8}"/>  <!-- 匹配SQL Server驱动的错误信息 -->
+        <error regexp="System\.Data\.SqlClient\.(SqlException|SqlConnection\.OnError)"/>  <!-- 匹配SQL Server .NET驱动的异常信息 -->
+        <error regexp="(?s)Exception.*?\bRoadhouse\.Cms\."/>  <!-- 匹配Roadhouse CMS相关的异常信息 -->
+        <error regexp="Microsoft SQL Native Client error '[0-9a-fA-F]{8}"/>  <!-- 匹配SQL Server Native Client的错误信息 -->
+        <error regexp="$SQL Server$"/>  <!-- 匹配SQL Server的错误信息 -->
+        <error regexp="ODBC SQL Server Driver"/>  <!-- 匹配ODBC SQL Server驱动的错误信息 -->
+        <error regexp="ODBC Driver \d+ for SQL Server"/>  <!-- 匹配ODBC SQL Server驱动的错误信息 -->
+        <error regexp="SQLServer JDBC Driver"/>  <!-- 匹配SQL Server JDBC驱动的错误信息 -->
+        <error regexp="com\.jnetdirect\.jsql"/>  <!-- 匹配JNetDirect SQL Server驱动的错误信息 -->
+        <error regexp="macromedia\.jdbc\.sqlserver"/>  <!-- 匹配Macromedia SQL Server驱动的错误信息 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Sqlsrv_Exception"/>  <!-- 匹配Zend框架中SQL Server相关的异常信息 -->
+        <error regexp="com\.microsoft\.sqlserver\.jdbc"/>  <!-- 匹配Microsoft SQL Server JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\](Mssql|SqlSrv)"/>  <!-- 匹配PDO SQL Server驱动的错误信息 -->
+        <error regexp="SQL(Srv|Server)Exception"/>  <!-- 匹配SQL Server异常的错误信息 -->
+        <error regexp="Unclosed quotation mark after the character string"/>  <!-- 匹配未闭合的引号的错误信息 -->
+    </dbms>
+
+<?xml version="1.0" encoding="UTF-8"?>  <!-- 声明XML文档的版本为1.0，编码方式为UTF-8 -->
+
+<root>  <!-- 定义XML文档的根元素，所有内容都包含在此标签内 -->
+    <dbms value="MySQL">  <!-- 定义MySQL数据库管理系统，value属性指定数据库类型为MySQL -->
+        <error regexp="SQL syntax.*?MySQL"/>  <!-- 匹配包含“SQL syntax”和“MySQL”的错误信息，用于识别MySQL语法错误 -->
+        <error regexp="Warning.*?\Wmysqli?_"/>  <!-- 匹配包含“Warning”和“mysqli”或“mysql”的警告信息，用于识别MySQL扩展的警告 -->
+        <error regexp="MySQLSyntaxErrorException"/>  <!-- 匹配MySQL语法异常的错误信息，用于识别MySQL语法错误 -->
+        <error regexp="valid MySQL result"/>  <!-- 匹配无效的MySQL查询结果的错误信息，用于识别查询结果无效的情况 -->
+        <error regexp="check the manual that (corresponds to|fits) your MySQL server version"/>  <!-- 匹配与MySQL服务器版本不匹配的错误信息，提示用户检查手册 -->
+        <error regexp="check the manual that (corresponds to|fits) your MariaDB server version" fork="MariaDB"/>  <!-- 匹配与MariaDB服务器版本不匹配的错误信息，fork属性指定为MariaDB -->
+        <error regexp="check the manual that (corresponds to|fits) your Drizzle server version" fork="Drizzle"/>  <!-- 匹配与Drizzle服务器版本不匹配的错误信息，fork属性指定为Drizzle -->
+        <error regexp="Unknown column '[^ ]+' in 'field list'"/>  <!-- 匹配未知列名的错误信息，用于识别字段列表中不存在的列 -->
+        <error regexp="MySqlClient\."/>  <!-- 匹配MySqlClient相关的错误信息，用于识别MySqlClient驱动的错误 -->
+        <error regexp="com\.mysql\.jdbc"/>  <!-- 匹配MySQL JDBC驱动的错误信息，用于识别JDBC相关的错误 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Mysqli_Exception"/>  <!-- 匹配Zend框架中MySQLi相关的异常信息，用于识别Zend框架中的MySQLi错误 -->
+        <error regexp="Pdo[./_\\]Mysql"/>  <!-- 匹配PDO MySQL驱动的错误信息，用于识别PDO驱动的错误 -->
+        <error regexp="MySqlException"/>  <!-- 匹配MySQL异常的错误信息，用于识别MySQL相关的异常 -->
+        <error regexp="SQLSTATE$\d+$: Syntax error or access violation"/>  <!-- 匹配SQL语法错误或访问违规的错误信息，用于识别SQLSTATE错误 -->
+        <error regexp="MemSQL does not support this type of query" fork="MemSQL"/>  <!-- 匹配MemSQL不支持的查询类型的错误信息，fork属性指定为MemSQL -->
+        <error regexp="is not supported by MemSQL" fork="MemSQL"/>  <!-- 匹配MemSQL不支持的查询类型的错误信息，fork属性指定为MemSQL -->
+        <error regexp="unsupported nested scalar subselect" fork="MemSQL"/>  <!-- 匹配MemSQL不支持的嵌套标量子查询的错误信息，fork属性指定为MemSQL -->
+    </dbms>
+
+    <dbms value="PostgreSQL">  <!-- 定义PostgreSQL数据库管理系统，value属性指定数据库类型为PostgreSQL -->
+        <error regexp="PostgreSQL.*?ERROR"/>  <!-- 匹配包含“PostgreSQL”和“ERROR”的错误信息，用于识别PostgreSQL错误 -->
+        <error regexp="Warning.*?\Wpg_"/>  <!-- 匹配包含“Warning”和“pg_”的警告信息，用于识别PostgreSQL扩展的警告 -->
+        <error regexp="valid PostgreSQL result"/>  <!-- 匹配无效的PostgreSQL查询结果的错误信息，用于识别查询结果无效的情况 -->
+        <error regexp="Npgsql\."/>  <!-- 匹配Npgsql驱动的错误信息，用于识别Npgsql驱动的错误 -->
+        <error regexp="PG::SyntaxError:"/>  <!-- 匹配PostgreSQL语法错误信息，用于识别语法错误 -->
+        <error regexp="org\.postgresql\.util\.PSQLException"/>  <!-- 匹配PostgreSQL JDBC驱动的异常信息，用于识别JDBC相关的错误 -->
+        <error regexp="ERROR:\s\ssyntax error at or near"/>  <!-- 匹配PostgreSQL语法错误信息，用于识别语法错误 -->
+        <error regexp="ERROR: parser: parse error at or near"/>  <!-- 匹配PostgreSQL解析错误信息，用于识别解析错误 -->
+        <error regexp="PostgreSQL query failed"/>  <!-- 匹配PostgreSQL查询失败的错误信息，用于识别查询失败的情况 -->
+        <error regexp="org\.postgresql\.jdbc"/>  <!-- 匹配PostgreSQL JDBC驱动的错误信息，用于识别JDBC相关的错误 -->
+        <error regexp="Pdo[./_\\]Pgsql"/>  <!-- 匹配PDO PostgreSQL驱动的错误信息，用于识别PDO驱动的错误 -->
+        <error regexp="PSQLException"/>  <!-- 匹配PostgreSQL异常的错误信息，用于识别PostgreSQL相关的异常 -->
+    </dbms>
+
+    <dbms value="Microsoft SQL Server">  <!-- 定义Microsoft SQL Server数据库管理系统，value属性指定数据库类型为SQL Server -->
+        <error regexp="Driver.*? SQL[\-\_\ ]*Server"/>  <!-- 匹配包含“Driver”和“SQL Server”的错误信息，用于识别SQL Server驱动的错误 -->
+        <error regexp="OLE DB.*? SQL Server"/>  <!-- 匹配包含“OLE DB”和“SQL Server”的错误信息，用于识别OLE DB驱动的错误 -->
+        <error regexp="\bSQL Server[^&lt;&quot;]+Driver"/>  <!-- 匹配SQL Server驱动的错误信息，用于识别驱动相关的错误 -->
+        <error regexp="Warning.*?\W(mssql|sqlsrv)_"/>  <!-- 匹配包含“Warning”和“mssql”或“sqlsrv”的警告信息，用于识别SQL Server扩展的警告 -->
+        <error regexp="\bSQL Server[^&lt;&quot;]+[0-9a-fA-F]{8}"/>  <!-- 匹配SQL Server驱动的错误信息，用于识别驱动相关的错误 -->
+        <error regexp="System\.Data\.SqlClient\.(SqlException|SqlConnection\.OnError)"/>  <!-- 匹配SQL Server .NET驱动的异常信息，用于识别.NET驱动的错误 -->
+        <error regexp="(?s)Exception.*?\bRoadhouse\.Cms\."/>  <!-- 匹配Roadhouse CMS相关的异常信息，用于识别CMS相关的错误 -->
+        <error regexp="Microsoft SQL Native Client error '[0-9a-fA-F]{8}"/>  <!-- 匹配SQL Server Native Client的错误信息，用于识别Native Client的错误 -->
+        <error regexp="$SQL Server$"/>  <!-- 匹配SQL Server的错误信息，用于识别SQL Server相关的错误 -->
+        <error regexp="ODBC SQL Server Driver"/>  <!-- 匹配ODBC SQL Server驱动的错误信息，用于识别ODBC驱动的错误 -->
+        <error regexp="ODBC Driver \d+ for SQL Server"/>  <!-- 匹配ODBC SQL Server驱动的错误信息，用于识别ODBC驱动的错误 -->
+        <error regexp="SQLServer JDBC Driver"/>  <!-- 匹配SQL Server JDBC驱动的错误信息，用于识别JDBC驱动的错误 -->
+        <error regexp="com\.jnetdirect\.jsql"/>  <!-- 匹配JNetDirect SQL Server驱动的错误信息，用于识别JNetDirect驱动的错误 -->
+        <error regexp="macromedia\.jdbc\.sqlserver"/>  <!-- 匹配Macromedia SQL Server驱动的错误信息，用于识别Macromedia驱动的错误 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Sqlsrv_Exception"/>  <!-- 匹配Zend框架中SQL Server相关的异常信息，用于识别Zend框架中的SQL Server错误 -->
+        <error regexp="com\.microsoft\.sqlserver\.jdbc"/>  <!-- 匹配Microsoft SQL Server JDBC驱动的错误信息，用于识别JDBC驱动的错误 -->
+        <error regexp="Pdo[./_\\](Mssql|SqlSrv)"/>  <!-- 匹配PDO SQL Server驱动的错误信息，用于识别PDO驱动的错误 -->
+        <error regexp="SQL(Srv|Server)��������
+
+```xml
+<root>  <!-- 定义XML文档的根元素 -->
+    <dbms value="Microsoft Access">  <!-- 定义Microsoft Access数据库管理系统 -->
+        <error regexp="Microsoft Access (\d+ )?Driver"/>  <!-- 匹配Microsoft Access驱动的错误信息 -->
+        <error regexp="JET Database Engine"/>  <!-- 匹配JET数据库引擎的错误信息 -->
+        <error regexp="Access Database Engine"/>  <!-- 匹配Access数据库引擎的错误信息 -->
+        <error regexp="ODBC Microsoft Access"/>  <!-- 匹配ODBC Microsoft Access驱动的错误信息 -->
+        <error regexp="Syntax error $missing operator$ in query expression"/>  <!-- 匹配查询表达式中的缺失操作符的语法错误 -->
+    </dbms>
+
+    <dbms value="Oracle">  <!-- 定义Oracle数据库管理系统 -->
+        <error regexp="\bORA-\d{5}"/>  <!-- 匹配ORA错误代码，后跟五位数字 -->
+        <error regexp="Oracle error"/>  <!-- 匹配通用的Oracle错误信息 -->
+        <error regexp="Oracle.*?Driver"/>  <!-- 匹配与Oracle相关的驱动错误信息 -->
+        <error regexp="Warning.*?\W(oci|ora)_"/>  <!-- 匹配OCI或ORA相关的警告信息 -->
+        <error regexp="quoted string not properly terminated"/>  <!-- 匹配未正确终止的引号字符串的错误信息 -->
+        <error regexp="SQL command not properly ended"/>  <!-- 匹配未正确结束的SQL命令错误信息 -->
+        <error regexp="macromedia\.jdbc\.oracle"/>  <!-- 匹配Macromedia Oracle JDBC驱动的错误信息 -->
+        <error regexp="oracle\.jdbc"/>  <!-- 匹配Oracle JDBC驱动的错误信息 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Oracle_Exception"/>  <!-- 匹配Zend框架中Oracle相关的异常信息 -->
+        <error regexp="Pdo[./_\\](Oracle|OCI)"/>  <!-- 匹配PDO Oracle或OCI驱动的错误信息 -->
+        <error regexp="OracleException"/>  <!-- 匹配Oracle异常的错误信息 -->
+    </dbms>
+
+    <dbms value="IBM DB2">  <!-- 定义IBM DB2数据库管理系统 -->
+        <error regexp="CLI Driver.*?DB2"/>  <!-- 匹配DB2 CLI驱动的错误信息 -->
+        <error regexp="DB2 SQL error"/>  <!-- 匹配DB2 SQL错误的通用错误信息 -->
+        <error regexp="\bdb2_\w+\(}/>  <!-- 匹配DB2相关函数调用的错误信息 -->
+        <error regexp="SQLCODE[=:\d, -]+SQLSTATE"/>  <!-- 匹配包含SQLCODE和SQLSTATE的错误信息 -->
+        <error regexp="com\.ibm\.db2\.jcc"/>  <!-- 匹配IBM DB2 JCC驱动的错误信息 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Db2_Exception"/>  <!-- 匹配Zend框架中DB2相关的异常信息 -->
+        <error regexp="Pdo[./_\\]Ibm"/>  <!-- 匹配PDO IBM DB2驱动的错误信息 -->
+        <error regexp="DB2Exception"/>  <!-- 匹配DB2异常的错误信息 -->
+        <error regexp="ibm_db_dbi\.ProgrammingError"/>  <!-- 匹配ibm_db_dbi中的编程错误信息 -->
+    </dbms>
+
+    <dbms value="Informix">  <!-- 定义Informix数据库管理系统 -->
+        <error regexp="Warning.*?\Wifx_"/>  <!-- 匹配Informix扩展相关的警告信息 -->
+        <error regexp="Exception.*?Informix"/>  <!-- 匹配Informix相关的异常信息 -->
+        <error regexp="Informix ODBC Driver"/>  <!-- 匹配Informix ODBC驱动的错误信息 -->
+        <error regexp="ODBC Informix driver"/>  <!-- 匹配ODBC Informix驱动的错误信息 -->
+        <error regexp="com\.informix\.jdbc"/>  <!-- 匹配Informix JDBC驱动的错误信息 -->
+        <error regexp="weblogic\.jdbc\.informix"/>  <!-- 匹配WebLogic中Informix JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\]Informix"/>  <!-- 匹配PDO Informix驱动的错误信息 -->
+        <error regexp="IfxException"/>  <!-- 匹配Informix异常的错误信息 -->
     </dbms>
 
     <!-- Interbase/Firebird -->
-    <dbms value="Firebird">
-        <error regexp="Dynamic SQL Error"/>
-        <error regexp="Warning.*?\Wibase_"/>
-        <error regexp="org\.firebirdsql\.jdbc"/>
-        <error regexp="Pdo[./_\\]Firebird"/>
+    <dbms value="Firebird">  <!-- 定义Firebird数据库管理系统 -->
+        <error regexp="Dynamic SQL Error"/>  <!-- 匹配动态SQL错误信息 -->
+        <error regexp="Warning.*?\Wibase_"/>  <!-- 匹配Firebird扩展相关的警告信息 -->
+        <error regexp="org\.firebirdsql\.jdbc"/>  <!-- 匹配Firebird SQL JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\]Firebird"/>  <!-- 匹配PDO Firebird驱动的错误信息 -->
     </dbms>
 
-    <dbms value="SQLite">
-        <error regexp="SQLite/JDBCDriver"/>
-        <error regexp="SQLite\.Exception"/>
-        <error regexp="(Microsoft|System)\.Data\.SQLite\.SQLiteException"/>
-        <error regexp="Warning.*?\W(sqlite_|SQLite3::)"/>
-        <error regexp="\[SQLITE_ERROR\]"/>
-        <error regexp="SQLite error \d+:"/>
-        <error regexp="sqlite3.OperationalError:"/>
-        <error regexp="SQLite3::SQLException"/>
-        <error regexp="org\.sqlite\.JDBC"/>
-        <error regexp="Pdo[./_\\]Sqlite"/>
-        <error regexp="SQLiteException"/>
+    <dbms value="SQLite">  <!-- 定义SQLite数据库管理系统 -->
+        <error regexp="SQLite/JDBCDriver"/>  <!-- 匹配SQLite JDBC驱动的错误信息 -->
+        <error regexp="SQLite\.Exception"/>  <!-- 匹配SQLite异常的错误信息 -->
+        <error regexp="(Microsoft|System)\.Data\.SQLite\.SQLiteException"/>  <!-- 匹配Microsoft或System Data的SQLite异常信息 -->
+        <error regexp="Warning.*?\W(sqlite_|SQLite3::)"/>  <!-- 匹配SQLite或SQLite3相关的警告信息 -->
+        <error regexp="$SQLITE_ERROR$"/>  <!-- 匹配SQLite错误信息 -->
+        <error regexp="SQLite error \d+:"/>  <!-- 匹配SQLite错误代码的信息 -->
+        <error regexp="sqlite3.OperationalError:"/>  <!-- 匹配SQLite3操作错误的信息 -->
+        <error regexp="SQLite3::SQLException"/>  <!-- 匹配SQLite3 SQL异常的信息 -->
+        <error regexp="org\.sqlite\.JDBC"/>  <!-- 匹配SQLite JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\]Sqlite"/>  <!-- 匹配PDO SQLite驱动的错误信息 -->
+        <error regexp="SQLiteException"/>  <!-- 匹配SQLite异常的错误信息 -->
     </dbms>
 
-    <dbms value="SAP MaxDB">
-        <error regexp="SQL error.*?POS([0-9]+)"/>
-        <error regexp="Warning.*?\Wmaxdb_"/>
-        <error regexp="DriverSapDB"/>
-        <error regexp="-3014.*?Invalid end of SQL statement"/>
-        <error regexp="com\.sap\.dbtech\.jdbc"/>
-        <error regexp="\[-3008\].*?: Invalid keyword or missing delimiter"/>
+    <dbms value="SAP MaxDB">  <!-- 定义SAP MaxDB数据库管理系统 -->
+        <error regexp="SQL error.*?POS([0-9]+)"/>  <!-- 匹配SAP MaxDB SQL错误的信息，其中包括位置编号 -->
+        <error regexp="Warning.*?\Wmaxdb_"/>  <!-- 匹配MaxDB扩展相关的警告信息 -->
+        <error regexp="DriverSapDB"/>  <!-- 匹配SapDB驱动的错误信息 -->
+        <error regexp="-3014.*?Invalid end of SQL statement"/>  <!-- 匹配无效的SQL语句结束的错误信息 -->
+        <error regexp="com\.sap\.dbtech\.jdbc"/>  <!-- 匹配SAP DBTech JDBC驱动的错误信息 -->
+        <error regexp="$-3008$.*?: Invalid keyword or missing delimiter"/>  <!-- 匹配无效关键字或缺失分隔符的错误信息 -->
     </dbms>
 
-    <dbms value="Sybase">
-        <error regexp="Warning.*?\Wsybase_"/>
-        <error regexp="Sybase message"/>
-        <error regexp="Sybase.*?Server message"/>
-        <error regexp="SybSQLException"/>
-        <error regexp="Sybase\.Data\.AseClient"/>
-        <error regexp="com\.sybase\.jdbc"/>
+    <dbms value="Sybase">  <!-- 定义Sybase数据库管理系统 -->
+        <error regexp="Warning.*?\Wsybase_"/>  <!-- 匹配Sybase扩展相关的警告信息 -->
+        <error regexp="Sybase message"/>  <!-- 匹配Sybase消息的错误信息 -->
+        <error regexp="Sybase.*?Server message"/>  <!-- 匹配Sybase服务器消息的错误信息 -->
+        <error regexp="SybSQLException"/>  <!-- 匹配Sybase异常的错误信息 -->
+        <error regexp="Sybase\.Data\.AseClient"/>  <!-- 匹配Sybase .NET AseClient的错误信息 -->
+        <error regexp="com\.sybase\.jdbc"/>  <!-- 匹配Sybase JDBC驱动的错误信息 -->
     </dbms>
 
-    <dbms value="Ingres">
-        <error regexp="Warning.*?\Wingres_"/>
-        <error regexp="Ingres SQLSTATE"/>
-        <error regexp="Ingres\W.*?Driver"/>
-        <error regexp="com\.ingres\.gcf\.jdbc"/>
+    <dbms value="Ingres">  <!-- 定义Ingres数据库管理系统 -->
+        <error regexp="Warning.*?\Wingres_"/>  <!-- 匹配Ingres扩展相关的警告信息 -->
+        <error regexp="Ingres SQLSTATE"/>  <!-- 匹配Ingres SQLSTATE错误的信息 -->
+        <error regexp="Ingres\W.*?Driver"/>  <!-- 匹配Ingres驱动的错误信息 -->
+        <error regexp="com\.ingres\.gcf\.jdbc"/>  <!-- 匹配Ingres GCF JDBC驱动的错误信息 -->
     </dbms>
 
-    <dbms value="FrontBase">
-        <error regexp="Exception (condition )?\d+\. Transaction rollback"/>
-        <error regexp="com\.frontbase\.jdbc"/>
-        <error regexp="Syntax error 1. Missing"/>
-        <error regexp="(Semantic|Syntax) error [1-4]\d{2}\."/>
+    <dbms value="FrontBase">  <!-- 定义FrontBase数据库管理系统 -->
+        <error regexp="Exception (condition )?\d+\. Transaction rollback"/>  <!-- 匹配回滚事务的异常信息 -->
+        <error regexp="com\.frontbase\.jdbc"/>  <!-- 匹配FrontBase JDBC驱动的错误信息 -->
+        <error regexp="Syntax error 1. Missing"/>  <!-- 匹配语法错误的信息，缺失某部分内容 -->
+        <error regexp="(Semantic|Syntax) error [1-4]\d{2}\."/>  <!-- 匹配语义或语法错误，后跟一个特定的错误码 -->
     </dbms>
 
-    <dbms value="HSQLDB">
-        <error regexp="Unexpected end of command in statement \["/>
-        <error regexp="Unexpected token.*?in statement \["/>
-        <error regexp="org\.hsqldb\.jdbc"/>
+    <dbms value="HSQLDB">  <!-- 定义HSQLDB数据库管理系统 -->
+        <error regexp="Unexpected end of command in statement $"/>  <!-- 匹配SQL语句意外结束的错误信息 -->
+        <error regexp="Unexpected token.*?in statement \["/>  <!-- 匹配SQL语句中意外标记的错误信息 -->
+        <error regexp="org\.hsqldb\.jdbc"/>  <!-- 匹配HSQLDB JDBC驱动的错误信息 -->
     </dbms>
 
-    <dbms value="H2">
-        <error regexp="org\.h2\.jdbc"/>
-        <error regexp="\[42000-192\]"/>
+    <dbms value="H2">  <!-- 定义H2数据库管理系统 -->
+        <error regexp="org\.h2\.jdbc"/>  <!-- 匹配H2 JDBC驱动的错误信息 -->
+        <error regexp="\[42000-192$"/>  <!-- 匹配H2特定错误代码的信息 -->
     </dbms>
 
-    <dbms value="MonetDB">
-        <error regexp="![0-9]{5}![^\n]+(failed|unexpected|error|syntax|expected|violation|exception)"/>
-        <error regexp="\[MonetDB\]\[ODBC Driver"/>
-        <error regexp="nl\.cwi\.monetdb\.jdbc"/>
+    <dbms value="MonetDB">  <!-- 定义MonetDB数据库管理系统 -->
+        <error regexp="![0-9]{5}![^\n]+(failed|unexpected|error|syntax|expected|violation|exception)"/>  <!-- 匹配包含MonetDB特定错误前缀的错误信息 -->
+        <error regexp="$MonetDB$\[ODBC Driver"/>  <!-- 匹配MonetDB ODBC驱动的错误信息 -->
+        <error regexp="nl\.cwi\.monetdb\.jdbc"/>  <!-- 匹配MonetDB JDBC驱动的错误信息 -->
     </dbms>
+</root>
+
 
-    <dbms value="Apache Derby">
-        <error regexp="Syntax error: Encountered"/>
-        <error regexp="org\.apache\.derby"/>
-        <error regexp="ERROR 42X01"/>
+<?xml version="1.0" encoding="UTF-8"?>  <!-- 声明XML文档的版本为1.0，编码使用UTF-8 -->
+
+<root>  <!-- 根元素，包含所有其他元素 -->
+    <dbms value="Microsoft Access">  <!-- 定义数据库管理系统为Microsoft Access -->
+        <error regexp="Microsoft Access (\d+ )?Driver"/>  <!-- 匹配包含"Microsoft Access"和"Driver"的错误信息，支持可选的版本号 -->
+        <error regexp="JET Database Engine"/>  <!-- 匹配JET数据库引擎的错误信息 -->
+        <error regexp="Access Database Engine"/>  <!-- 匹配Access数据库引擎的错误信息 -->
+        <error regexp="ODBC Microsoft Access"/>  <!-- 匹配ODBC与Microsoft Access相关的错误信息 -->
+        <error regexp="Syntax error $missing operator$ in query expression"/>  <!-- 匹配查询表达式中缺失操作符的语法错误 -->
+    </dbms>
+
+    <dbms value="Oracle">  <!-- 定义数据库管理系统为Oracle -->
+        <error regexp="\bORA-\d{5}"/>  <!-- 匹配ORA错误代码，后跟五位数字 -->
+        <error regexp="Oracle error"/>  <!-- 匹配通用的Oracle错误信息 -->
+        <error regexp="Oracle.*?Driver"/>  <!-- 匹配与Oracle驱动相关的错误信息 -->
+        <error regexp="Warning.*?\W(oci|ora)_"/>  <!-- 匹配OCI或ORA相关的警告信息 -->
+        <error regexp="quoted string not properly terminated"/>  <!-- 匹配未正确结束的引用字符串的错误信息 -->
+        <error regexp="SQL command not properly ended"/>  <!-- 匹配SQL命令未正确结束的错误信息 -->
+        <error regexp="macromedia\.jdbc\.oracle"/>  <!-- 匹配Macromedia的Oracle JDBC驱动的错误信息 -->
+        <error regexp="oracle\.jdbc"/>  <!-- 匹配Oracle JDBC驱动的错误信息 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Oracle_Exception"/>  <!-- 匹配Zend框架中Oracle相关的异常信息 -->
+        <error regexp="Pdo[./_\\](Oracle|OCI)"/>  <!-- 匹配PDO的Oracle或OCI驱动的错误信息 -->
+        <error regexp="OracleException"/>  <!-- 匹配Oracle异常的错误信息 -->
     </dbms>
 
-    <dbms value="Vertica">
-        <error regexp=", Sqlstate: (3F|42).{3}, (Routine|Hint|Position):"/>
-        <error regexp="/vertica/Parser/scan"/>
-        <error regexp="com\.vertica\.jdbc"/>
-        <error regexp="org\.jkiss\.dbeaver\.ext\.vertica"/>
-        <error regexp="com\.vertica\.dsi\.dataengine"/>
+    <dbms value="IBM DB2">  <!-- 定义数据库管理系统为IBM DB2 -->
+        <error regexp="CLI Driver.*?DB2"/>  <!-- 匹配DB2 CLI驱动的错误信息 -->
+        <error regexp="DB2 SQL error"/>  <!-- 匹配DB2 SQL错误的通用错误信息 -->
+        <error regexp="\bdb2_\w+\(" />  <!-- 匹配DB2相关函数调用的错误信息 -->
+        <error regexp="SQLCODE[=:\d, -]+SQLSTATE"/>  <!-- 匹配包含SQLCODE和SQLSTATE的错误信息 -->
+        <error regexp="com\.ibm\.db2\.jcc"/>  <!-- 匹配IBM DB2 JCC驱动的错误信息 -->
+        <error regexp="Zend_Db_(Adapter|Statement)_Db2_Exception"/>  <!-- 匹配Zend框架中DB2相关的异常信息 -->
+        <error regexp="Pdo[./_\\]Ibm"/>  <!-- 匹配PDO IBM DB2驱动的错误信息 -->
+        <error regexp="DB2Exception"/>  <!-- 匹配DB2异常的错误信息 -->
+        <error regexp="ibm_db_dbi\.ProgrammingError"/>  <!-- 匹配ibm_db_dbi模块中的编程错误信息 -->
     </dbms>
 
-    <dbms value="Mckoi">
-        <error regexp="com\.mckoi\.JDBCDriver"/>
-        <error regexp="com\.mckoi\.database\.jdbc"/>
-        <error regexp="&lt;REGEX_LITERAL&gt;"/>
+    <dbms value="Informix">  <!-- 定义数据库管理系统为Informix -->
+        <error regexp="Warning.*?\Wifx_"/>  <!-- 匹配Informix扩展相关的警告信息 -->
+        <error regexp="Exception.*?Informix"/>  <!-- 匹配Informix相关的异常信息 -->
+        <error regexp="Informix ODBC Driver"/>  <!-- 匹配Informix ODBC驱动的错误信息 -->
+        <error regexp="ODBC Informix driver"/>  <!-- 匹配ODBC Informix驱动的错误信息 -->
+        <error regexp="com\.informix\.jdbc"/>  <!-- 匹配Informix JDBC驱动的错误信息 -->
+        <error regexp="weblogic\.jdbc\.informix"/>  <!-- 匹配WebLogic中Informix JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\]Informix"/>  <!-- 匹配PDO Informix驱动的错误信息 -->
+        <error regexp="IfxException"/>  <!-- 匹配Informix异常的错误信息 -->
+    </dbms>
+
+    <!-- Interbase/Firebird -->
+    <dbms value="Firebird">  <!-- 定义数据库管理系统为Firebird -->
+        <error regexp="Dynamic SQL Error"/>  <!-- 匹配动态SQL错误的错误信息 -->
+        <error regexp="Warning.*?\Wibase_"/>  <!-- 匹配Firebird扩展相关的警告信息 -->
+        <error regexp="org\.firebirdsql\.jdbc"/>  <!-- 匹配Firebird SQL JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\]Firebird"/>  <!-- 匹配PDO Firebird驱动的错误信息 -->
     </dbms>
 
-    <dbms value="Presto">
-        <error regexp="com\.facebook\.presto\.jdbc"/>
-        <error regexp="io\.prestosql\.jdbc"/>
-        <error regexp="com\.simba\.presto\.jdbc"/>
-        <error regexp="UNION query has different number of fields: \d+, \d+"/>
-        <error regexp="line \d+:\d+: mismatched input '[^']+'. Expecting:"/>
+    <dbms value="SQLite">  <!-- 定义数据库管理系统为SQLite -->
+        <error regexp="SQLite/JDBCDriver"/>  <!-- 匹配SQLite JDBC驱动的错误信息 -->
+        <error regexp="SQLite\.Exception"/>  <!-- 匹配SQLite异常的错误信息 -->
+        <error regexp="(Microsoft|System)\.Data\.SQLite\.SQLiteException"/>  <!-- 匹配Microsoft或System Data的SQLite异常信息 -->
+        <error regexp="Warning.*?\W(sqlite_|SQLite3::)"/>  <!-- 匹配与SQLite或SQLite3相关的警告信息 -->
+        <error regexp="$SQLITE_ERROR$"/>  <!-- 匹配SQLite错误的错误信息 -->
+        <error regexp="SQLite error \d+:"/>  <!-- 匹配SQLite错误代码的信息 -->
+        <error regexp="sqlite3.OperationalError:"/>  <!-- 匹配SQLite3操作错误的信息 -->
+        <error regexp="SQLite3::SQLException"/>  <!-- 匹配SQLite3 SQL异常的信息 -->
+        <error regexp="org\.sqlite\.JDBC"/>  <!-- 匹配SQLite JDBC驱动的错误信息 -->
+        <error regexp="Pdo[./_\\]Sqlite"/>  <!-- 匹配PDO SQLite驱动的错误信息 -->
+        <error regexp="SQLiteException"/>  <!-- 匹配SQLite异常的错误信息 -->
     </dbms>
 
-    <dbms value="Altibase">
-        <error regexp="Altibase\.jdbc\.driver"/>
+    <dbms value="SAP MaxDB">  <!-- 定义数据库管理系统为SAP MaxDB -->
+        <error regexp="SQL error.*?POS([0-9]+)"/>  <!-- 匹配SQL错误信息，并捕捉位置编号 -->
+        <error regexp="Warning.*?\Wmaxdb_"/>  <!-- 匹配MaxDB扩展相关的警告信息 -->
+        <error regexp="DriverSapDB"/>  <!-- 匹配SapDB驱动的错误信息 -->
+        <error regexp="-3014.*?Invalid end of SQL statement"/>  <!-- 匹配SQL语句无效结束的错误信息 -->
+        <error regexp="com\.sap\.dbtech\.jdbc"/>  <!-- 匹配SAP DBTech JDBC驱动的错误信息 -->
+        <error regexp="$-3008$.*?: Invalid keyword or missing delimiter"/>  <!-- 匹配无效关键字或缺失分隔符的错误信息 -->
     </dbms>
 
-    <dbms value="MimerSQL">
-        <error regexp="com\.mimer\.jdbc"/>
-        <error regexp="Syntax error,[^\n]+assumed to mean"/>
+    <dbms value="Sybase">  <!-- 定义数据库管理系统为Sybase -->
+        <error regexp="Warning.*?\Wsybase_"/>  <!-- 匹配Sybase扩展相关的警告信息 -->
+        <error regexp="Sybase message"/>  <!-- 匹配Sybase消息的错误信息 -->
+        <error regexp="Sybase.*?Server message"/>  <!-- 匹配Sybase服务器消息的错误信息 -->
+        <error regexp="SybSQLException"/>  <!-- 匹配Sybase异常的错误信息 -->
+        <error regexp="Sybase\.Data\.AseClient"/>  <!-- 匹配Sybase .NET AseClient的错误信息 -->
+        <error regexp="com\.sybase\.jdbc"/>  <!-- 匹配Sybase JDBC驱动的错误信息 -->
     </dbms>
 
-    <dbms value="ClickHouse">
-        <error regexp="Code: \d+. DB::Exception:"/>
-        <error regexp="Syntax error: failed at position \d+"/>
+    <dbms value="Ingres">  <!-- 定义数据库管理系统为Ingres -->
+        <error regexp="Warning.*?\Wingres_"/>  <!-- 匹配Ingres扩展相关的警告信息 -->
+        <error regexp="Ingres SQLSTATE"/>  <!-- 匹配Ingres SQLSTATE的错误信息 -->
+        <error regexp="Ingres\W.*?Driver"/>  <!-- 匹配Ingres驱动的错误信息 -->
+        <error regexp="com\.ingres\.gcf\.jdbc"/>  <!-- 匹配Ingres GCF JDBC驱动的错误信息 -->
     </dbms>
 
-    <dbms value="CrateDB">
-        <error regexp="io\.crate\.client\.jdbc"/>
+    <dbms value="FrontBase">  <!-- 定义数据库管理系统为FrontBase -->
+        <error regexp="Exception (condition )?\d+\. Transaction rollback"/>  <!-- 匹配回滚事务的异常信息 -->
+        <error regexp="com\.frontbase\.jdbc"/>  <!-- 匹配FrontBase JDBC驱动的错误信息 -->
+        <error regexp="Syntax error 1. Missing"/>  <!-- 匹配语法错误，未找到某些内容 -->
+        <error regexp="(Semantic|Syntax) error [1-4]\d{2}\."/>  <!-- 匹配语义或语法错误，后跟特定的错误码 -->
     </dbms>
 
-    <dbms value="Cache">
-        <error regexp="encountered after end of query"/>
-        <error regexp="A comparison operator is required here"/>
+    <dbms value="HSQLDB">  <!-- 定义数据库管理系统为HSQLDB -->
+        <error regexp="Unexpected end of command in statement $"/>  <!-- 匹配在SQL语句中指令意外结束的错误信息 -->
+        <error regexp="Unexpected token.*?in statement \["/>  <!-- 匹配在SQL语句中意外标记的错误信息 -->
+        <error regexp="org\.hsqldb\.jdbc"/>  <!-- 匹配HSQLDB JDBC驱动的错误信息 -->
     </dbms>
 
-    <dbms value="Raima Database Manager">
-        <error regexp="-10048: Syntax error"/>
-        <error regexp="rdmStmtPrepare\(.+?\) returned"/>
+    <dbms value="H2">  <!-- 定义数据库管理系统为H2 -->
+        <error regexp="org\.h2\.jdbc"/>  <!-- 匹配H2 JDBC驱动的错误信息 -->
+        <error regexp="\[42000-192$"/>  <!-- 匹配H2特定错误代码的信息 -->
     </dbms>
 
-    <dbms value="Virtuoso">
-        <error regexp="SQ074: Line \d+:"/>
-        <error regexp="SR185: Undefined procedure"/>
-        <error regexp="SQ200: No table "/>
-        <error regexp="Virtuoso S0002 Error"/>
-        <error regexp="\[(Virtuoso Driver|Virtuoso iODBC Driver)\]\[Virtuoso Server\]"/>
+    <dbms value="MonetDB">  <!-- 定义数据库管理系统为MonetDB -->
+        <error regexp="![0-9]{5}![^\n]+(failed|unexpected|error|syntax|expected|violation|exception)"/>  <!-- 匹配包含特定错误前缀的MonetDB错误信息 -->
+        <error regexp="$MonetDB$\[ODBC Driver"/>  <!-- 匹配MonetDB ODBC驱动的错误信息 -->
+        <error regexp="nl\.cwi\.monetdb\.jdbc"/>  <!-- 匹配MonetDB JDBC驱动的错误信息 -->
     </dbms>
 </root>
diff --git a/src/sqlmap-master/data/xml/queries.xml b/src/sqlmap-master/data/xml/queries.xml
index 28b5582..4652872 100644
--- a/src/sqlmap-master/data/xml/queries.xml
+++ b/src/sqlmap-master/data/xml/queries.xml
@@ -1,1177 +1,668 @@
 <?xml version="1.0" encoding="UTF-8"?>
+<!-- XML 文件声明，指定版本为 1.0，编码为 UTF-8 -->
 
 <root>
+    <!-- 根元素，包含所有数据库相关的查询模板 -->
+
     <dbms value="MySQL">
-        <!-- http://dba.fyicenter.com/faq/mysql/Difference-between-CHAR-and-NCHAR.html -->
+        <!-- 定义 MySQL 数据库管理系统相关的查询模板 -->
+
+        <!-- 将字段转换为 NCHAR 类型 -->
         <cast query="CAST(%s AS NCHAR)"/>
+        
+        <!-- 获取字段的字符长度 -->
         <length query="CHAR_LENGTH(%s)"/>
+        
+        <!-- 判断字段是否为 NULL，如果是则返回空格 -->
         <isnull query="IFNULL(%s,' ')"/>
+        
+        <!-- 定义字段分隔符为逗号 -->
         <delimiter query=","/>
+        
+        <!-- 定义 LIMIT 子句，用于分页查询 -->
         <limit query="LIMIT %d,%d"/>
+        
+        <!-- 正则表达式匹配 LIMIT 子句，支持两种格式：LIMIT d,d 和 LIMIT d -->
         <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+        
+        <!-- 定义 LIMIT 子句中起始位置的分组索引 -->
         <limitgroupstart query="1"/>
+        
+        <!-- 定义 LIMIT 子句中结束位置的分组索引 -->
         <limitgroupstop query="2"/>
+        
+        <!-- 定义 LIMIT 子句的字符串表示 -->
         <limitstring query=" LIMIT "/>
+        
+        <!-- 定义 ORDER BY 子句，按指定字段升序排序 -->
         <order query="ORDER BY %s ASC"/>
+        
+        <!-- 计算字段的行数 -->
         <count query="COUNT(%s)"/>
+        
+        <!-- 定义 SQL 注释的三种形式：-- -、/* 和 # -->
         <comment query="-- -" query2="/*" query3="#"/>
+        
+        <!-- 获取字段的子字符串 -->
         <substring query="MID((%s),%d,%d)"/>
+        
+        <!-- 连接两个字符串 -->
         <concatenate query="CONCAT(%s,%s)"/>
+        
+        <!-- 使用 CASE 语句进行条件判断 -->
         <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
+        
+        <!-- 将字段转换为十六进制表示 -->
         <hex query="HEX(%s)"/>
+        
+        <!-- 推断字段中某个字符的 ASCII 码是否大于指定值 -->
         <inference query="ORD(MID((%s),%d,1))>%d"/>
+        
+        <!-- 获取数据库版本信息 -->
         <banner query="VERSION()"/>
+        
+        <!-- 获取当前用户 -->
         <current_user query="CURRENT_USER()"/>
+        
+        <!-- 获取当前数据库名称 -->
         <current_db query="DATABASE()"/>
+        
+        <!-- 获取数据库服务器的主机名 -->
         <hostname query="@@HOSTNAME"/>
+        
+        <!-- 获取指定表的注释信息 -->
         <table_comment query="SELECT table_comment FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' AND table_name='%s'"/>
+        
+        <!-- 获取指定列的注释信息 -->
         <column_comment query="SELECT column_comment FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s' AND table_name='%s' AND column_name='%s'"/>
+        
+        <!-- 检查当前用户是否具有 DBA 权限 -->
         <is_dba query="(SELECT super_priv FROM mysql.user WHERE user='%s' LIMIT 0,1)='Y'"/>
+        
+        <!-- 检查是否存在指定的用户定义函数 (UDF) -->
         <check_udf query="(SELECT name FROM mysql.func WHERE name='%s' LIMIT 0,1)='%s'"/>
+        
+        <!-- 用户相关的查询模板 -->
         <users>
+            <!-- 获取所有用户的权限信息 -->
             <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="SELECT user FROM mysql.user" query3="SELECT username FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+            
+            <!-- 盲注查询，获取指定位置的用户信息 -->
             <blind query="SELECT DISTINCT(grantee) FROM INFORMATION_SCHEMA.USER_PRIVILEGES LIMIT %d,1" query2="SELECT DISTINCT(user) FROM mysql.user LIMIT %d,1" query3="SELECT DISTINCT(username) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS LIMIT %d,1" count="SELECT COUNT(DISTINCT(grantee)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES" count2="SELECT COUNT(DISTINCT(user)) FROM mysql.user" count3="SELECT COUNT(DISTINCT(username)) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
         </users>
-        <!-- https://github.com/dev-sec/mysql-baseline/issues/35 -->
-        <!-- https://stackoverflow.com/a/31122246 -->
+        
+        <!-- 密码相关的查询模板 -->
         <passwords>
+            <!-- 获取所有用户的用户名和密码哈希 -->
             <inband query="SELECT user,authentication_string FROM mysql.user" condition="user"/>
+            
+            <!-- 盲注查询，获取指定用户的密码哈希 -->
             <blind query="SELECT DISTINCT(authentication_string) FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(authentication_string)) FROM mysql.user WHERE user='%s'"/>
         </passwords>
+        
+        <!-- 权限相关的查询模板 -->
         <privileges>
+            <!-- 获取所有用户的权限信息 -->
             <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="SELECT user,select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user" condition2="user"/>
+            
+            <!-- 盲注查询，获取指定用户的权限信息 -->
             <blind query="SELECT DISTINCT(privilege_type) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s' LIMIT %d,1" query2="SELECT select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(privilege_type)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s'" count2="SELECT COUNT(*) FROM mysql.user WHERE user='%s'"/>
-        </privileges>
-        <roles/>
-        <statements>
-            <inband query="SELECT INFO FROM INFORMATION_SCHEMA.PROCESSLIST" query2="SELECT INFO FROM DATA_DICTIONARY.PROCESSLIST"/>
-            <blind query="SELECT INFO FROM INFORMATION_SCHEMA.PROCESSLIST ORDER BY ID LIMIT %d,1" query2="SELECT INFO FROM INFORMATION_SCHEMA.PROCESSLIST WHERE ID=%d" query3="SELECT ID FROM INFORMATION_SCHEMA.PROCESSLIST LIMIT %d,1" count="SELECT COUNT(DISTINCT(INFO)) FROM INFORMATION_SCHEMA.PROCESSLIST"/>
-        </statements>
-        <dbs>
-            <inband query="SELECT schema_name FROM INFORMATION_SCHEMA.SCHEMATA" query2="SELECT db FROM mysql.db"/>
-            <blind query="SELECT DISTINCT(schema_name) FROM INFORMATION_SCHEMA.SCHEMATA LIMIT %d,1" query2="SELECT DISTINCT(db) FROM mysql.db LIMIT %d,1" count="SELECT COUNT(DISTINCT(schema_name)) FROM INFORMATION_SCHEMA.SCHEMATA" count2="SELECT COUNT(DISTINCT(db)) FROM mysql.db"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT table_schema,table_name FROM INFORMATION_SCHEMA.TABLES" query2="SELECT database_name,table_name FROM mysql.innodb_table_stats" condition="table_schema" condition2="database_name"/>
-            <blind query="SELECT table_name FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' LIMIT %d,1" query2="SELECT table_name FROM mysql.innodb_table_stats WHERE database_name='%s' LIMIT %d,1" count="SELECT COUNT(table_name) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s'" count2="SELECT COUNT(table_name) FROM mysql.innodb_table_stats WHERE database_name='%s'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT column_name,column_type FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND table_schema='%s'" condition="column_name"/>
-            <blind query="SELECT column_name FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND table_schema='%s'" query2="SELECT column_type FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND column_name='%s' AND table_schema='%s'" count="SELECT COUNT(column_name) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND table_schema='%s'" condition="column_name"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s.%s ORDER BY %s"/>
-            <blind query="SELECT %s FROM %s.%s ORDER BY %s LIMIT %d,1" count="SELECT COUNT(*) FROM %s.%s"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT schema_name FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" query2="SELECT db FROM mysql.db WHERE %s" condition="schema_name" condition2="db"/>
-            <blind query="SELECT DISTINCT(schema_name) FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" query2="SELECT DISTINCT(db) FROM mysql.db WHERE %s" count="SELECT COUNT(DISTINCT(schema_name)) FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" count2="SELECT COUNT(DISTINCT(db)) FROM mysql.db WHERE %s" condition="schema_name" condition2="db"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT table_schema,table_name FROM INFORMATION_SCHEMA.TABLES WHERE %s" condition="table_name" condition2="table_schema"/>
-            <blind query="SELECT DISTINCT(table_schema) FROM INFORMATION_SCHEMA.TABLES WHERE %s" query2="SELECT DISTINCT(table_name) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s'" count="SELECT COUNT(DISTINCT(table_schema)) FROM INFORMATION_SCHEMA.TABLES WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s'" condition="table_name" condition2="table_schema"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT table_schema,table_name FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" condition="column_name" condition2="table_schema" condition3="table_name"/>
-            <blind query="SELECT DISTINCT(table_schema) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" query2="SELECT DISTINCT(table_name) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s'" count="SELECT COUNT(DISTINCT(table_schema)) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s'" condition="column_name" condition2="table_schema" condition3="table_name"/>
-        </search_column>
-    </dbms>
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- XML 文件声明，指定版本为 1.0，编码为 UTF-8 -->
 
-    <dbms value="PostgreSQL">
-        <cast query="CAST(%s AS VARCHAR(10000))"/>
-        <length query="LENGTH(%s)"/>
-        <!-- NOTE: PostgreSQL does not like COALESCE with different data-types (e.g. COALESCE(id,' ')) -->
-        <isnull query="COALESCE(%s::text,' ')"/>
-        <delimiter query="||"/>
-        <limit query="OFFSET %d LIMIT %d"/>
-        <limitregexp query="\s+OFFSET\s+([\d]+)\s+LIMIT\s+([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+<root>
+    <!-- 根元素，包含所有数据库相关的查询模板 -->
+
+    <dbms value="MySQL">
+        <!-- 定义 MySQL 数据库管理系统相关的查询模板 -->
+
+        <!-- 将字段转换为 NCHAR 类型 -->
+        <cast query="CAST(%s AS NCHAR)"/>
+        
+        <!-- 获取字段的字符长度 -->
+        <length query="CHAR_LENGTH(%s)"/>
+        
+        <!-- 判断字段是否为 NULL，如果是则返回空格 -->
+        <isnull query="IFNULL(%s,' ')"/>
+        
+        <!-- 定义字段分隔符为逗号 -->
+        <delimiter query=","/>
+        
+        <!-- 定义 LIMIT 子句，用于分页查询 -->
+        <limit query="LIMIT %d,%d"/>
+        
+        <!-- 正则表达式匹配 LIMIT 子句，支持两种格式：LIMIT d,d 和 LIMIT d -->
+        <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+        
+        <!-- 定义 LIMIT 子句中起始位置的分组索引 -->
         <limitgroupstart query="1"/>
+        
+        <!-- 定义 LIMIT 子句中结束位置的分组索引 -->
         <limitgroupstop query="2"/>
-        <limitstring query=" OFFSET "/>
+        
+        <!-- 定义 LIMIT 子句的字符串表示 -->
+        <limitstring query=" LIMIT "/>
+        
+        <!-- 定义 ORDER BY 子句，按指定字段升序排序 -->
         <order query="ORDER BY %s ASC"/>
+        
+        <!-- 计算字段的行数 -->
         <count query="COUNT(%s)"/>
-        <comment query="--" query2="/*"/>
-        <substring query="SUBSTRING((%s)::text FROM %d FOR %d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END)"/>
-        <hex query="ENCODE(CONVERT_TO((%s),'UTF8'),'HEX')"/>
-        <inference query="ASCII(SUBSTRING((%s)::text FROM %d FOR 1))>%d"/>
+        
+        <!-- 定义 SQL 注释的三种形式：-- -、/* 和 # -->
+        <comment query="-- -" query2="/*" query3="#"/>
+        
+        <!-- 获取字段的子字符串 -->
+        <substring query="MID((%s),%d,%d)"/>
+        
+        <!-- 连接两个字符串 -->
+        <concatenate query="CONCAT(%s,%s)"/>
+        
+        <!-- 使用 CASE 语句进行条件判断 -->
+        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
+        
+        <!-- 将字段转换为十六进制表示 -->
+        <hex query="HEX(%s)"/>
+        
+        <!-- 推断字段中某个字符的 ASCII 码是否大于指定值 -->
+        <inference query="ORD(MID((%s),%d,1))>%d"/>
+        
+        <!-- 获取数据库版本信息 -->
         <banner query="VERSION()"/>
-        <current_user query="CURRENT_USER"/>
-        <current_db query="CURRENT_SCHEMA()"/>
-        <hostname/>
-        <!--<table_comment query="SELECT pg_catalog.obj_description(c.oid) FROM pg_catalog.pg_class c WHERE c.relname='%s'"/>-->
-        <table_comment query="SELECT description FROM pg_description JOIN pg_class ON pg_description.objoid=pg_class.oid JOIN pg_namespace ON pg_class.relnamespace=pg_namespace.oid WHERE nspname='%s' AND relname='%s'"/>
-        <column_comment query="SELECT col_description(pg_class.oid,pg_attribute.attnum) FROM pg_class JOIN pg_namespace ON pg_class.relnamespace=pg_namespace.oid JOIN pg_attribute ON pg_class.oid=pg_attribute.attrelid WHERE nspname='%s' AND relname='%s' AND attname='%s'"/>
-        <is_dba query="(SELECT usesuper=true FROM pg_user WHERE usename=CURRENT_USER OFFSET 0 LIMIT 1)"/>
-        <check_udf query="(SELECT proname='%s' FROM pg_proc WHERE proname='%s' OFFSET 0 LIMIT 1)"/>
+        
+        <!-- 获取当前用户 -->
+        <current_user query="CURRENT_USER()"/>
+        
+        <!-- 获取当前数据库名称 -->
+        <current_db query="DATABASE()"/>
+        
+        <!-- 获取数据库服务器的主机名 -->
+        <hostname query="@@HOSTNAME"/>
+        
+        <!-- 获取指定表的注释信息 -->
+        <table_comment query="SELECT table_comment FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' AND table_name='%s'"/>
+        
+        <!-- 获取指定列的注释信息 -->
+        <column_comment query="SELECT column_comment FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s' AND table_name='%s' AND column_name='%s'"/>
+        
+        <!-- 检查当前用户是否具有 DBA 权限 -->
+        <is_dba query="(SELECT super_priv FROM mysql.user WHERE user='%s' LIMIT 0,1)='Y'"/>
+        
+        <!-- 检查是否存在指定的用户定义函数 (UDF) -->
+        <check_udf query="(SELECT name FROM mysql.func WHERE name='%s' LIMIT 0,1)='%s'"/>
+        
+        <!-- 用户相关的查询模板 -->
         <users>
-            <inband query="SELECT usename FROM pg_user"/>
-            <blind query="SELECT DISTINCT(usename) FROM pg_user ORDER BY usename OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(usename)) FROM pg_user"/>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="SELECT user FROM mysql.user" query3="SELECT username FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+            
+            <!-- 盲注查询，获取指定位置的用户信息 -->
+            <blind query="SELECT DISTINCT(grantee) FROM INFORMATION_SCHEMA.USER_PRIVILEGES LIMIT %d,1" query2="SELECT DISTINCT(user) FROM mysql.user LIMIT %d,1" query3="SELECT DISTINCT(username) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS LIMIT %d,1" count="SELECT COUNT(DISTINCT(grantee)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES" count2="SELECT COUNT(DISTINCT(user)) FROM mysql.user" count3="SELECT COUNT(DISTINCT(username)) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
         </users>
+        
+        <!-- 密码相关的查询模板 -->
         <passwords>
-            <inband query="SELECT usename,passwd FROM pg_shadow" condition="usename"/>
-            <blind query="SELECT DISTINCT(passwd) FROM pg_shadow WHERE usename='%s' OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(passwd)) FROM pg_shadow WHERE usename='%s'"/>
+            <!-- 获取所有用户的用户名和密码哈希 -->
+            <inband query="SELECT user,authentication_string FROM mysql.user" condition="user"/>
+            
+            <!-- 盲注查询，获取指定用户的密码哈希 -->
+            <blind query="SELECT DISTINCT(authentication_string) FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(authentication_string)) FROM mysql.user WHERE user='%s'"/>
         </passwords>
+        
+        <!-- 权限相关的查询模板 -->
         <privileges>
-            <inband query="SELECT usename,(CASE WHEN usecreatedb THEN 1 ELSE 0 END),(CASE WHEN usesuper THEN 1 ELSE 0 END),(CASE WHEN usecatupd THEN 1 ELSE 0 END) FROM pg_user" condition="usename"/>
-            <blind query="SELECT (CASE WHEN usecreatedb THEN 1 ELSE 0 END),(CASE WHEN usesuper THEN 1 ELSE 0 END),(CASE WHEN usecatupd THEN 1 ELSE 0 END) FROM pg_user WHERE usename='%s' OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(usename)) FROM pg_user WHERE usename='%s'"/>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="SELECT user,select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user" condition2="user"/>
+            
+            <!-- 盲注查询，获取指定用户的权限信息 -->
+            <blind query="SELECT DISTINCT(privilege_type) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s' LIMIT %d,1" query2="SELECT select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(privilege_type)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s'" count2="SELECT COUNT(*) FROM mysql.user WHERE user='%s'"/>
         </privileges>
-        <roles/>
-        <statements>
-            <inband query="SELECT query FROM pg_stat_activity WHERE query != '&lt;IDLE&gt;'"/>
-            <blind query="SELECT DISTINCT(query) FROM pg_stat_activity WHERE query != '&lt;IDLE&gt;' OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(query)) FROM pg_stat_activity WHERE query != '&lt;IDLE&gt;'"/>
-        </statements>
-        <dbs>
-            <inband query="SELECT DISTINCT(schemaname) FROM pg_tables"/>
-            <blind query="SELECT DISTINCT(schemaname) FROM pg_tables ORDER BY schemaname OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(schemaname)) FROM pg_tables"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT schemaname,tablename FROM pg_tables" condition="schemaname" query2="SELECT table_schema,table_name FROM information_schema.tables" condition2="table_schema"/>
-            <blind query="SELECT tablename FROM pg_tables WHERE schemaname='%s' ORDER BY tablename OFFSET %d LIMIT 1" count="SELECT COUNT(tablename) FROM pg_tables WHERE schemaname='%s'" query2="SELECT table_name FROM information_schema.tables WHERE table_schema='%s' OFFSET %d LIMIT 1" count2="SELECT COUNT(table_name) FROM information_schema.tables WHERE table_schema='%s'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT attname,typname FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND a.relname='%s' AND nspname='%s' ORDER BY attname" condition="attname"/>
-            <blind query="SELECT attname FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND a.relname='%s' AND nspname='%s' ORDER BY attname" query2="SELECT typname FROM pg_namespace,pg_type,pg_attribute b JOIN pg_class a ON a.oid=b.attrelid WHERE a.relname='%s' AND a.relnamespace=pg_namespace.oid AND pg_type.oid=b.atttypid AND attnum>0 AND attname='%s' AND nspname='%s' ORDER BY attname" count="SELECT COUNT(attname) FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND a.relname='%s' AND nspname='%s'" condition="attname"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s.%s ORDER BY %s"/>
-            <blind query="SELECT %s FROM %s.%s ORDER BY %s OFFSET %d LIMIT 1" count="SELECT COUNT(*) FROM %s.%s"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT schemaname FROM pg_tables WHERE %s" condition="schemaname"/>
-            <blind query="SELECT DISTINCT(schemaname) FROM pg_tables WHERE %s" count="SELECT COUNT(DISTINCT(schemaname)) FROM pg_tables WHERE %s" condition="schemaname"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT schemaname,tablename FROM pg_tables WHERE %s" condition="tablename" condition2="schemaname"/>
-            <blind query="SELECT DISTINCT(schemaname) FROM pg_tables WHERE %s" query2="SELECT tablename FROM pg_tables WHERE schemaname='%s'" count="SELECT COUNT(DISTINCT(schemaname)) FROM pg_tables WHERE %s" count2="SELECT COUNT(tablename) FROM pg_tables WHERE schemaname='%s'" condition="tablename" condition2="schemaname"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT nspname,relname FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND %s" condition="attname" condition2="nspname" condition3="relname"/>
-            <blind query="SELECT DISTINCT(nspname) FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND %s" query2="SELECT DISTINCT(relname) FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND nspname='%s'" count="SELECT COUNT(DISTINCT(nspname)) FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND %s" count2="SELECT COUNT(DISTINCT(relname)) FROM pg_attribute b JOIN pg_class a ON a.oid=b.attrelid JOIN pg_type c ON c.oid=b.atttypid JOIN pg_namespace d ON a.relnamespace=d.oid WHERE b.attnum>0 AND nspname='%s'" condition="attname" condition2="nspname" condition3="relname"/>
-        </search_column>
-    </dbms>
 
-    <dbms value="Microsoft SQL Server">
-        <cast query="CAST(%s AS NVARCHAR(4000))"/>
-        <length query="LTRIM(STR(LEN(%s)))"/>
-        <isnull query="ISNULL(%s,' ')"/>
-        <delimiter query="+"/>
-        <limit query="SELECT TOP %d "/>
-        <limitregexp query="TOP\s+([\d]+)\s+.+?\s+FROM\s+.+?\s+WHERE\s+.+?\s+NOT\s+IN\s+\(SELECT\s+TOP\s+([\d]+)\s+"/>
-        <limitgroupstart query="2"/>
-        <limitgroupstop query="1"/>
-        <limitstring/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--" query2="/*"/>
-        <substring query="SUBSTRING((%s),%d,%d)"/>
-        <concatenate query="%s+%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END)"/>
-        <hex query="master.dbo.fn_varbintohexstr(CAST(%s AS VARBINARY(8000)))"/>
-        <inference query="UNICODE(SUBSTRING((%s),%d,1))>%d"/>
-        <banner query="SELECT @@VERSION"/>
-        <current_user query="SELECT SYSTEM_USER"/>
-        <current_db query="SELECT DB_NAME()"/>
-        <hostname query="@@SERVERNAME"/>
-        <table_comment query="SELECT value FROM fn_listextendedproperty(NULL,'schema','%s','table','%s',NULL,NULL)"/>
-        <column_comment query="SELECT value FROM fn_listextendedproperty(NULL,'schema','%s','table','%s','column','%s')"/>
-        <is_dba query="IS_SRVROLEMEMBER('sysadmin')=1" query2="IS_SRVROLEMEMBER('sysadmin','%s')=1"/>
-        <users>
-            <inband query="SELECT name FROM master..syslogins" query2="SELECT name FROM sys.sql_logins"/>
-            <!-- NOTE: in NOT IN kind of queries ORDER BY is a must -->
-            <blind query="SELECT TOP 1 name FROM master..syslogins WHERE name NOT IN (SELECT TOP %d name FROM master..syslogins ORDER BY name) ORDER BY name" query2="SELECT TOP 1 name FROM sys.sql_logins WHERE name NOT IN (SELECT TOP %d name FROM sys.sql_logins ORDER BY name) ORDER BY name" count="SELECT LTRIM(STR(COUNT(name))) FROM master..syslogins" count2="SELECT LTRIM(STR(COUNT(name))) FROM sys.sql_logins"/>
-        </users>
-        <passwords>
-            <inband query="SELECT name,master.dbo.fn_varbintohexstr(password) FROM master..sysxlogins" query2="SELECT name,master.dbo.fn_varbintohexstr(password_hash) FROM sys.sql_logins" condition="name"/>
-            <blind query="SELECT TOP 1 master.dbo.fn_varbintohexstr(password) FROM master..sysxlogins WHERE name='%s' AND password NOT IN (SELECT TOP %d password FROM master..sysxlogins WHERE name='%s' ORDER BY password) ORDER BY password" query2="SELECT TOP 1 master.dbo.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='%s' AND password_hash NOT IN (SELECT TOP %d password_hash FROM sys.sql_logins WHERE name='%s' ORDER BY password_hash) ORDER BY password_hash" count="SELECT LTRIM(STR(COUNT(password))) FROM master..sysxlogins WHERE name='%s'" count2="SELECT LTRIM(STR(COUNT(password_hash))) FROM sys.sql_logins WHERE name='%s'"/>
-        </passwords>
-        <!-- NOTE: in Microsoft SQL Server there is no query to enumerate DBMS users privileges -->
-        <privileges/>
-        <roles/>
-        <statements>
-            <inband query="SELECT st.text FROM sys.dm_exec_cached_plans cp CROSS APPLY sys.dm_exec_sql_text(cp.plan_handle) st"/>
-            <blind query="SELECT TOP 1 a.text FROM sys.dm_exec_cached_plans cp CROSS APPLY sys.dm_exec_sql_text(cp.plan_handle) a WHERE a.text NOT IN (SELECT TOP %d b.text FROM sys.dm_exec_cached_plans cp CROSS APPLY sys.dm_exec_sql_text(cp.plan_handle) b ORDER BY b.text) ORDER BY a.text" count="SELECT LTRIM(STR(COUNT(st.text))) FROM sys.dm_exec_cached_plans cp CROSS APPLY sys.dm_exec_sql_text(cp.plan_handle) st"/>
-        </statements>
-        <dbs>
-            <inband query="SELECT name FROM master..sysdatabases" query2="SELECT DB_NAME(%d)"/>
-            <blind query="SELECT TOP 1 name FROM master..sysdatabases WHERE name NOT IN (SELECT TOP %d name FROM master..sysdatabases ORDER BY name) ORDER BY name" count="SELECT LTRIM(STR(COUNT(name))) FROM master..sysdatabases"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT %s..sysusers.name+'.'+%s..sysobjects.name AS table_name FROM %s..sysobjects INNER JOIN %s..sysusers ON %s..sysobjects.uid=%s..sysusers.uid WHERE %s..sysobjects.xtype IN ('u','v')" query2="SELECT table_schema+'.'+table_name FROM information_schema.tables WHERE table_catalog='%s'" query3="SELECT name FROM %s..sysobjects WHERE xtype='U'"/>
-            <blind query="SELECT TOP 1 %s..sysusers.name+'.'+%s..sysobjects.name FROM %s..sysobjects INNER JOIN %s..sysusers ON %s..sysobjects.uid=%s..sysusers.uid WHERE %s..sysobjects.xtype IN ('u','v') AND %s..sysusers.name+'.'+%s..sysobjects.name NOT IN (SELECT TOP %d %s..sysusers.name+'.'+%s..sysobjects.name FROM %s..sysobjects INNER JOIN %s..sysusers ON %s..sysobjects.uid=%s..sysusers.uid WHERE %s..sysobjects.xtype IN ('u','v') ORDER BY %s..sysusers.name+'.'+%s..sysobjects.name) ORDER BY %s..sysusers.name+'.'+%s..sysobjects.name" count="SELECT LTRIM(STR(COUNT(name))) FROM %s..sysobjects WHERE %s..sysobjects.xtype IN ('u','v')" query2="SELECT TOP 1 table_schema+'.'+table_name FROM information_schema.tables WHERE table_catalog='%s' AND table_schema+'.'+table_name NOT IN (SELECT TOP %d table_schema+'.'+table_name FROM information_schema.tables WHERE table_catalog='%s' ORDER BY table_schema+'.'+table_name) ORDER BY table_schema+'.'+table_name" count2="SELECT LTRIM(STR(COUNT(table_name))) FROM information_schema.tables WHERE table_catalog='%s'" query3="SELECT TOP 1 name FROM %s..sysobjects WHERE xtype='U' AND name NOT IN (SELECT TOP %d name FROM %s..sysobjects WHERE xtype='U' ORDER BY name) ORDER BY name" count3="SELECT COUNT(name) FROM %s..sysobjects WHERE xtype='U'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT %s..syscolumns.name,TYPE_NAME(%s..syscolumns.xtype) AS type_name FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.name='%s'" query2="SELECT COL_NAME(OBJECT_ID('%s.%s'),%d)" condition="[DB]..syscolumns.name"/>
-            <blind query="SELECT TOP 1 %s..syscolumns.name FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.name='%s' AND %s..syscolumns.name NOT IN (SELECT TOP %d %s..syscolumns.name FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.name='%s' ORDER BY %s..syscolumns.name) ORDER BY %s..syscolumns.name" query2="SELECT TYPE_NAME(%s..syscolumns.xtype) FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.name='%s' AND %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.name='%s'" query3="SELECT COL_NAME(OBJECT_ID('%s.%s'),%d)" count="SELECT LTRIM(STR(COUNT(name))) FROM %s..syscolumns WHERE id=(SELECT id FROM %s..sysobjects WHERE name='%s')" condition="[DB]..syscolumns.name"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s.%s"/>
-            <blind query="SELECT MIN(%s) FROM %s WHERE CONVERT(NVARCHAR(4000),%s)>'%s'" query2="SELECT MAX(%s) FROM %s WHERE CONVERT(NVARCHAR(4000),%s) LIKE '%s'" query3="SELECT %s FROM (SELECT %s, ROW_NUMBER() OVER (ORDER BY (SELECT 1)) AS CAP FROM %s)x WHERE CAP=%d" count="SELECT LTRIM(STR(COUNT(*))) FROM %s" count2="SELECT LTRIM(STR(COUNT(DISTINCT(%s)))) FROM %s"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT name FROM master..sysdatabases WHERE %s" condition="name"/>
-            <blind query="SELECT name FROM master..sysdatabases WHERE %s" count="SELECT LTRIM(STR(COUNT(name))) FROM master..sysdatabases WHERE %s" condition="name"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT name FROM %s..sysobjects WHERE %s..sysobjects.xtype IN ('u','v') AND " condition="name" condition2="name"/>
-            <blind query="SELECT name FROM %s..sysobjects WHERE %s..sysobjects.xtype IN ('u','v') " count="SELECT LTRIM(STR(COUNT(name))) FROM %s..sysobjects WHERE %s..sysobjects.xtype IN ('u','v')" condition="name" condition2="name"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT %s..sysobjects.name FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.xtype IN ('u','v')" condition="[DB]..syscolumns.name" condition2="[DB]..sysobjects.name"/>
-            <blind query="SELECT %s..sysobjects.name FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.xtype IN ('u','v')" count="SELECT COUNT(%s..sysobjects.name) FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.xtype IN ('u','v')" condition="[DB]..syscolumns.name" condition2="[DB]..sysobjects.name"/>
-        </search_column>
-    </dbms>
 
-    <dbms value="Oracle">
-        <cast query="CAST(%s AS VARCHAR(4000))"/>
-        <length query="LENGTH(%s)"/>
-        <isnull query="NVL(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="ROWNUM AS CAP %s) WHERE CAP"/>
-        <limitregexp query="ROWNUM\s+AS\s+.+?\s+FROM\s+.+?\)\s+WHERE\s+.+?\s*=\s*[\d]+|ROWNUM\s*=\s*[\d]+"/>
-        <limitgroupstart/>
-        <limitgroupstop/>
-        <limitstring/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--"/>
-        <substring query="SUBSTRC((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
-        <hex query="RAWTOHEX(%s)"/>
-        <!--
-        NOTE: ASCIISTR (https://www.techonthenet.com/oracle/functions/asciistr.php)
-        -->
-        <inference query="ASCII(SUBSTRC((%s),%d,1))>%d"/>
-        <banner query="SELECT banner FROM v$version WHERE ROWNUM=1"/>
-        <current_user query="SELECT USER FROM DUAL"/>
-        <!--
-        NOTE: current physical DB but not usable for enumeration
-        <current_db query="SELECT SYS.DATABASE_NAME FROM DUAL"/>
-        -->
-        <current_db query="SELECT USER FROM DUAL"/>
-        <!--
-             NOTE: in Oracle to check if the session user is DBA you can use:
-             SELECT USERENV('ISDBA') FROM DUAL
-        -->
-        <hostname query="SELECT UTL_INADDR.GET_HOST_NAME FROM DUAL"/>
-        <table_comment query="SELECT COMMENTS FROM ALL_TAB_COMMENTS WHERE OWNER='%s' AND TABLE_NAME='%s'"/>
-        <column_comment query="SELECT COMMENTS FROM ALL_COL_COMMENTS WHERE OWNER='%s' AND TABLE_NAME='%s' AND COLUMN_NAME='%s'"/>
-        <is_dba query="(SELECT GRANTED_ROLE FROM DBA_ROLE_PRIVS WHERE GRANTEE=USER AND GRANTED_ROLE='DBA')='DBA'"/>
-        <users>
-            <inband query="SELECT USERNAME FROM SYS.ALL_USERS"/>
-            <blind query="SELECT USERNAME FROM (SELECT USERNAME,ROWNUM AS CAP FROM SYS.ALL_USERS) WHERE CAP=%d" count="SELECT COUNT(USERNAME) FROM SYS.ALL_USERS"/>
-        </users>
-        <passwords>
-            <inband query="SELECT NAME,PASSWORD FROM SYS.USER$" condition="NAME"/>
-            <blind query="SELECT PASSWORD FROM (SELECT PASSWORD,ROWNUM AS CAP FROM SYS.USER$ WHERE NAME='%s') WHERE CAP=%d" count="SELECT COUNT(PASSWORD) FROM SYS.USER$ WHERE NAME='%s'"/>
-        </passwords>
-        <!--
-             NOTE: in Oracle to enumerate the privileges for the session user you can use:
-             SELECT * FROM SESSION_PRIVS
-        -->
-        <privileges>
-            <inband query="SELECT GRANTEE,PRIVILEGE FROM DBA_SYS_PRIVS" query2="SELECT USERNAME,PRIVILEGE FROM USER_SYS_PRIVS" condition="GRANTEE" condition2="USERNAME"/>
-            <blind query="SELECT PRIVILEGE FROM (SELECT PRIVILEGE,ROWNUM AS CAP FROM DBA_SYS_PRIVS WHERE GRANTEE='%s') WHERE CAP=%d" query2="SELECT PRIVILEGE FROM (SELECT PRIVILEGE,ROWNUM AS CAP FROM USER_SYS_PRIVS WHERE USERNAME='%s') WHERE CAP=%d" count="SELECT COUNT(PRIVILEGE) FROM DBA_SYS_PRIVS WHERE GRANTEE='%s'" count2="SELECT COUNT(PRIVILEGE) FROM USER_SYS_PRIVS WHERE USERNAME='%s'"/>
-        </privileges>
-        <!--
-             NOTE: in Oracle to enumerate the roles for the session user you can use:
-             SELECT * FROM SESSION_ROLES
-        -->
-        <roles>
-            <inband query="SELECT GRANTEE,GRANTED_ROLE FROM DBA_ROLE_PRIVS" query2="SELECT USERNAME,GRANTED_ROLE FROM USER_ROLE_PRIVS" condition="GRANTEE" condition2="USERNAME"/>
-            <blind query="SELECT GRANTED_ROLE FROM (SELECT GRANTED_ROLE,ROWNUM AS CAP FROM DBA_ROLE_PRIVS WHERE GRANTEE='%s') WHERE CAP=%d" query2="SELECT GRANTED_ROLE FROM (SELECT GRANTED_ROLE,ROWNUM AS CAP FROM USER_ROLE_PRIVS WHERE USERNAME='%s') WHERE CAP=%d" count="SELECT COUNT(GRANTED_ROLE) FROM DBA_ROLE_PRIVS WHERE GRANTEE='%s'" count2="SELECT COUNT(GRANTED_ROLE) FROM USER_ROLE_PRIVS WHERE USERNAME='%s'"/>
-        </roles>
-        <statements>
-            <inband query="SELECT SQL_TEXT FROM V$SQL"/>
-            <blind query="SELECT SQL_TEXT FROM (SELECT SQL_TEXT,ROWNUM AS CAP FROM V$SQL WHERE SQL_TEXT NOT LIKE '%%SQL_TEXT%%') WHERE CAP=%d" count="SELECT COUNT(SQL_TEXT) FROM V$SQL WHERE SQL_TEXT NOT LIKE '%%SQL_TEXT%%'"/>
-        </statements>
-        <!-- NOTE: in Oracle schema names are the counterpart to database names on other DBMSes -->
-        <dbs>
-            <inband query="SELECT OWNER FROM (SELECT DISTINCT(OWNER) FROM SYS.ALL_TABLES)"/>
-            <blind query="SELECT OWNER FROM (SELECT OWNER,ROWNUM AS CAP FROM (SELECT DISTINCT(OWNER) FROM SYS.ALL_TABLES)) WHERE CAP=%d" count="SELECT COUNT(DISTINCT(OWNER)) FROM SYS.ALL_TABLES"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT OWNER,TABLE_NAME FROM SYS.ALL_TABLES" condition="OWNER"/>
-            <blind query="SELECT TABLE_NAME FROM (SELECT TABLE_NAME,ROWNUM AS CAP FROM SYS.ALL_TABLES WHERE OWNER='%s') WHERE CAP=%d" count="SELECT COUNT(TABLE_NAME) FROM SYS.ALL_TABLES WHERE OWNER='%s'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT COLUMN_NAME,DATA_TYPE FROM SYS.ALL_TAB_COLUMNS WHERE TABLE_NAME='%s' AND OWNER='%s'" condition="COLUMN_NAME"/>
-            <blind query="SELECT COLUMN_NAME FROM SYS.ALL_TAB_COLUMNS WHERE TABLE_NAME='%s' AND OWNER='%s'" query2="SELECT DATA_TYPE FROM SYS.ALL_TAB_COLUMNS WHERE TABLE_NAME='%s' AND COLUMN_NAME='%s' AND OWNER='%s'" count="SELECT COUNT(COLUMN_NAME) FROM SYS.ALL_TAB_COLUMNS WHERE TABLE_NAME='%s' AND OWNER='%s'" condition="COLUMN_NAME"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s ORDER BY ROWNUM"/>
-            <blind query="SELECT %s FROM (SELECT qq.*,ROWNUM AS CAP FROM %s qq ORDER BY ROWNUM) WHERE CAP=%d" count="SELECT COUNT(*) FROM %s"/>
-        </dump_table>
-        <!-- NOTE: in Oracle schema names are the counterpart to database names on other DBMSes -->
-        <search_db>
-            <inband query="SELECT OWNER FROM (SELECT DISTINCT(OWNER) FROM SYS.ALL_TABLES) WHERE %s" condition="OWNER"/>
-            <blind query="SELECT OWNER FROM (SELECT DISTINCT(OWNER) FROM SYS.ALL_TABLES) WHERE %s" count="SELECT COUNT(DISTINCT(OWNER)) FROM SYS.ALL_TABLES WHERE %s" condition="OWNER"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT OWNER,TABLE_NAME FROM SYS.ALL_TABLES WHERE %s" condition="TABLE_NAME" condition2="OWNER"/>
-            <blind query="SELECT OWNER FROM (SELECT DISTINCT(OWNER) FROM SYS.ALL_TABLES WHERE %s)" query2="SELECT TABLE_NAME FROM (SELECT DISTINCT(TABLE_NAME) FROM SYS.ALL_TABLES WHERE OWNER='%s')" count="SELECT COUNT(DISTINCT(OWNER)) FROM SYS.ALL_TABLES WHERE %s" count2="SELECT COUNT(DISTINCT(TABLE_NAME)) FROM SYS.ALL_TABLES WHERE OWNER='%s'" condition="TABLE_NAME" condition2="OWNER"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT OWNER,TABLE_NAME FROM SYS.ALL_TAB_COLUMNS WHERE %s" condition="COLUMN_NAME" condition2="OWNER" condition3="TABLE_NAME"/>
-            <blind query="SELECT OWNER FROM (SELECT DISTINCT(OWNER) FROM SYS.ALL_TAB_COLUMNS WHERE %s)" query2="SELECT TABLE_NAME FROM (SELECT DISTINCT(TABLE_NAME) FROM SYS.ALL_TAB_COLUMNS WHERE OWNER='%s')" count="SELECT COUNT(DISTINCT(OWNER)) FROM SYS.ALL_TAB_COLUMNS WHERE %s" count2="SELECT COUNT(DISTINCT(TABLE_NAME)) FROM SYS.ALL_TAB_COLUMNS WHERE OWNER='%s'" condition="COLUMN_NAME" condition2="OWNER" condition3="TABLE_NAME"/>
-        </search_column>
-    </dbms>
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- XML 文件声明，指定版本为 1.0，编码为 UTF-8 -->
 
-    <dbms value="SQLite">
-        <cast query="CAST(%s AS TEXT)" dbms_version="&gt;=3.0"/>
-        <!-- NOTE: On SQLite version 2 everything is stored as a string (Reference: http://www.mono-project.com/SQLite) -->
-        <length query="LENGTH(%s)"/>
-        <isnull query="COALESCE(%s,' ')"/>
-        <delimiter query="||"/>
+<root>
+    <!-- 根元素，包含所有数据库相关的查询模板 -->
+
+    <dbms value="MySQL">
+        <!-- 定义 MySQL 数据库管理系统相关的查询模板 -->
+
+        <!-- 将字段转换为 NCHAR 类型 -->
+        <cast query="CAST(%s AS NCHAR)"/>
+        
+        <!-- 获取字段的字符长度 -->
+        <length query="CHAR_LENGTH(%s)"/>
+        
+        <!-- 判断字段是否为 NULL，如果是则返回空格 -->
+        <isnull query="IFNULL(%s,' ')"/>
+        
+        <!-- 定义字段分隔符为逗号 -->
+        <delimiter query=","/>
+        
+        <!-- 定义 LIMIT 子句，用于分页查询 -->
         <limit query="LIMIT %d,%d"/>
+        
+        <!-- 正则表达式匹配 LIMIT 子句，支持两种格式：LIMIT d,d 和 LIMIT d -->
         <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+        
+        <!-- 定义 LIMIT 子句中起始位置的分组索引 -->
         <limitgroupstart query="1"/>
+        
+        <!-- 定义 LIMIT 子句中结束位置的分组索引 -->
         <limitgroupstop query="2"/>
+        
+        <!-- 定义 LIMIT 子句的字符串表示 -->
         <limitstring query=" LIMIT "/>
+        
+        <!-- 定义 ORDER BY 子句，按指定字段升序排序 -->
         <order query="ORDER BY %s ASC"/>
+        
+        <!-- 计算字段的行数 -->
         <count query="COUNT(%s)"/>
-        <comment query="--" query2="/*"/>
-        <substring query="SUBSTR((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
+        
+        <!-- 定义 SQL 注释的三种形式：-- -、/* 和 # -->
+        <comment query="-- -" query2="/*" query3="#"/>
+        
+        <!-- 获取字段的子字符串 -->
+        <substring query="MID((%s),%d,%d)"/>
+        
+        <!-- 连接两个字符串 -->
+        <concatenate query="CONCAT(%s,%s)"/>
+        
+        <!-- 使用 CASE 语句进行条件判断 -->
         <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
+        
+        <!-- 将字段转换为十六进制表示 -->
         <hex query="HEX(%s)"/>
-        <inference query="SUBSTR((%s),%d,1)>'%c'"/>
-        <banner query="SELECT SQLITE_VERSION()"/>
-        <current_user/>
-        <current_db/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba/>
-        <check_udf/>
-        <users/>
-        <passwords/>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <dbs/>
-        <tables>
-            <inband query="SELECT tbl_name FROM sqlite_master WHERE type='table'"/>
-            <blind query="SELECT tbl_name FROM sqlite_master WHERE type='table' LIMIT %d,1" count="SELECT COUNT(tbl_name) FROM sqlite_master WHERE type='table'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT MAX(sql) FROM sqlite_master WHERE type='table' AND tbl_name='%s'"/>
-            <blind query="SELECT sql FROM sqlite_master WHERE type='table' AND tbl_name='%s' LIMIT 1" condition=""/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s"/>
-            <blind query="SELECT %s FROM %s LIMIT %d,1" count="SELECT COUNT(*) FROM %s"/>
-        </dump_table>
-        <search_db/>
-        <search_table>
-            <inband query="SELECT tbl_name FROM sqlite_master WHERE type='table' AND %s" condition="tbl_name" condition2=""/>
-            <blind query="" query2="SELECT tbl_name FROM sqlite_master WHERE type='table'" count="" count2="SELECT COUNT(tbl_name) FROM sqlite_master WHERE type='table'" condition="tbl_name" condition2=""/>
-        </search_table>
-        <search_column/>
-    </dbms>
-
-    <dbms value="Microsoft Access">
-        <cast query="RTRIM(CVAR(%s))"/>
-        <length query="LEN(RTRIM(CVAR(%s)))"/>
-        <isnull query="IIF(LEN(%s)=0,' ',%s)"/>
-        <delimiter query="&amp;"/>
-        <limit query="TOP %d"/>
-        <limitregexp query="\s+TOP\s+([\d]+)"/>
-        <limitgroupstart query="1"/>
-        <limitgroupstop query="1"/>
-        <limitstring query=" TOP "/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="%16" query2="%00"/>
-        <substring query="MID((%s),%d,%d)"/>
-        <concatenate query="%s&amp;%s"/>
-        <case query="SELECT (IIF(%s,1,0))"/>
-        <inference query="ASCW(MID((%s),%d,1))>%d"/>
-        <banner/>
-        <!--CURRENTUSER() is not available outside the MS Access query tool itself-->
-        <current_user/>
-        <current_db/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba/>
-        <dbs/>
-        <!--MSysObjects have no read permission by default-->
-        <tables>
-            <inband query="SELECT Name FROM MSysObjects WHERE Type=1"/>
-            <blind query="SELECT MIN(Name) FROM MSysObjects WHERE Type=1 AND Name>'%s'" count="SELECT COUNT(Name) FROM MSysObjects WHERE Type=1"/>
-        </tables>
-        <dump_table>
-            <inband query="SELECT %s FROM %s"/>
-            <blind query="SELECT MIN(%s) FROM %s WHERE CVAR(%s)>'%s'" query2="SELECT TOP 1 %s FROM %s WHERE CVAR(%s) LIKE '%s'" count="SELECT COUNT(*) FROM %s" count2="SELECT COUNT(*) FROM (SELECT DISTINCT %s FROM %s)"/>
-        </dump_table>
-        <users/>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <search_db/>
-        <search_table/>
-        <search_column/>
-   </dbms>
-
-   <dbms value="Firebird">
-        <cast query="TRIM(CAST(%s AS VARCHAR(10000)))"/>
-        <length query="CHAR_LENGTH(TRIM(%s))"/>
-        <delimiter query="||"/>
-        <limit query="ROWS %d TO %d"/>
-        <limitregexp query="\s+ROWS\s+([\d]+)(\s+TO\s+([\d]+))?"/>
-        <limitgroupstart query="1"/>
-        <limitgroupstop query="2"/>
-        <limitstring query=" ROWS "/>
-        <isnull query="COALESCE(%s,' ')"/>
-        <order query="ORDER BY %s ASC"/>
-        <comment query="--"/>
-        <count query="COUNT(%s)"/>
-        <substring query="SUBSTRING((%s) FROM %d FOR %d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT IIF(%s,1,0)"/>
-        <inference query="ASCII_VAL(SUBSTRING((%s) FROM %d FOR 1))>%d" dbms_version="&gt;=2.1" query2="SUBSTRING((%s) FROM %d FOR 1)>'%c'"/>
-        <banner query="SELECT RDB$GET_CONTEXT('SYSTEM','ENGINE_VERSION') FROM RDB$DATABASE" dbms_version="&gt;=2.1"/>
-        <current_user query="SELECT CURRENT_USER FROM RDB$DATABASE"/>
-        <current_db query="SELECT RDB$GET_CONTEXT('SYSTEM','DB_NAME') FROM RDB$DATABASE"/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="CURRENT_USER='SYSDBA'"/>
-        <users>
-            <inband query="SELECT RDB$USER FROM RDB$USER_PRIVILEGES"/>
-            <blind query="SELECT FIRST 1 SKIP %d DISTINCT(RDB$USER) FROM RDB$USER_PRIVILEGES" count="SELECT COUNT(DISTINCT(RDB$USER)) FROM RDB$USER_PRIVILEGES"/>
-        </users>
-        <tables>
-            <inband query="SELECT RDB$RELATION_NAME FROM RDB$RELATIONS WHERE RDB$VIEW_BLR IS NULL AND (RDB$SYSTEM_FLAG IS NULL OR RDB$SYSTEM_FLAG=0)"/>
-            <blind query="SELECT FIRST 1 SKIP %d RDB$RELATION_NAME FROM RDB$RELATIONS WHERE RDB$VIEW_BLR IS NULL AND (RDB$SYSTEM_FLAG IS NULL OR RDB$SYSTEM_FLAG=0)" count="SELECT COUNT(RDB$RELATION_NAME) FROM RDB$RELATIONS WHERE RDB$VIEW_BLR IS NULL AND (RDB$SYSTEM_FLAG IS NULL OR RDB$SYSTEM_FLAG=0)"/>
-        </tables>
-        <privileges>
-            <inband query="SELECT RDB$USER,RDB$PRIVILEGE FROM RDB$USER_PRIVILEGES" condition="RDB$USER"/>
-            <blind query="SELECT FIRST 1 SKIP %d DISTINCT(RDB$PRIVILEGE) FROM RDB$USER_PRIVILEGES WHERE RDB$USER='%s'" count="SELECT COUNT(DISTINCT(RDB$PRIVILEGE)) FROM RDB$USER_PRIVILEGES WHERE RDB$USER='%s'"/>
-        </privileges>
-        <roles/>
-        <statements/>
-        <dbs/>
-        <columns>
-            <!--<inband query="SELECT r.RDB$FIELD_NAME,CASE f.RDB$FIELD_TYPE WHEN 261 THEN 'BLOB' WHEN 14 THEN 'CHAR' WHEN 40 THEN 'CSTRING' WHEN 11 THEN 'D_FLOAT' WHEN 27 THEN 'DOUBLE' WHEN 10 THEN 'FLOAT' WHEN 16 THEN 'INT64' WHEN 8 THEN 'INTEGER' WHEN 9 THEN 'QUAD' WHEN 7 THEN 'SMALLINT' WHEN 12 THEN 'DATE' WHEN 13 THEN 'TIME' WHEN 35 THEN 'TIMESTAMP' WHEN 37 THEN 'VARCHAR' ELSE 'UNKNOWN' END AS field_type FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE r.RDB$RELATION_NAME='%s'"/>-->
-            <inband query="SELECT r.RDB$FIELD_NAME,f.RDB$FIELD_TYPE FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE r.RDB$RELATION_NAME='%s'" condition="r.RDB$FIELD_NAME"/>
-            <blind query="SELECT r.RDB$FIELD_NAME FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE r.RDB$RELATION_NAME='%s'" query2="SELECT f.RDB$FIELD_TYPE FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE r.RDB$RELATION_NAME='%s' AND r.RDB$FIELD_NAME='%s'" count="SELECT COUNT(r.RDB$FIELD_NAME) FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE r.RDB$RELATION_NAME='%s'" condition="r.RDB$FIELD_NAME"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s"/>
-            <blind query="SELECT FIRST 1 SKIP %d %s FROM %s" count="SELECT COUNT(*) FROM %s"/>
-        </dump_table>
-        <search_db/>
-        <search_table>
-            <inband query="SELECT RDB$RELATION_NAME FROM RDB$RELATIONS WHERE RDB$VIEW_BLR IS NULL AND (RDB$SYSTEM_FLAG IS NULL OR RDB$SYSTEM_FLAG=0) AND %s" condition="RDB$RELATION_NAME" condition2=""/>
-            <blind query="" query2="SELECT FIRST 1 SKIP %d RDB$RELATION_NAME FROM RDB$RELATIONS WHERE RDB$VIEW_BLR IS NULL AND (RDB$SYSTEM_FLAG IS NULL OR RDB$SYSTEM_FLAG=0)" count="" count2="SELECT COUNT(RDB$RELATION_NAME) FROM RDB$RELATIONS WHERE RDB$VIEW_BLR IS NULL AND (RDB$SYSTEM_FLAG IS NULL OR RDB$SYSTEM_FLAG=0)" condition="RDB$RELATION_NAME" condition2=""/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT r.RDB$RELATION_NAME FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE %s" condition="r.RDB$FIELD_NAME" condition2="" condition3="r.RDB$RELATION_NAME"/>
-            <blind query="" query2="SELECT DISTINCT(r.RDB$RELATION_NAME) FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE %s" count="" count2="SELECT COUNT(DISTINCT(r.RDB$RELATION_NAME)) FROM RDB$RELATION_FIELDS r LEFT JOIN RDB$FIELDS f ON r.RDB$FIELD_SOURCE=f.RDB$FIELD_NAME WHERE %s" condition="r.RDB$FIELD_NAME" condition2="" condition3="r.RDB$RELATION_NAME"/>
-        </search_column>
-   </dbms>
-
-   <dbms value="SAP MaxDB">
-        <length query="LENGTH(%s)"/>
-        <isnull query="VALUE(%s,' ')" query2="IFNULL(%s,' ')"/>
-        <delimiter query=","/>
-        <limit query="LIMIT %d,%d"/>
-        <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)"/>
-        <limitgroupstart query="1"/>
-        <limitgroupstop query="2"/>
-        <!-- No real cast on SAP MaxDB -->
-        <cast query="REPLACE(CHR(%s),' ','_')"/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--" query2="#"/>
-        <substring query="SUBSTR((%s),%d,%d)"/>
-        <concatenate query="CONCAT(%s,%s)"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END) FROM VERSIONS"/>
-        <hex query="HEX(%s)"/>
-        <inference query="SUBSTR((%s),%d,1)>'%c'"/>
-        <banner query="SELECT ID FROM SYSINFO.VERSION"/>
-        <current_user query="SELECT USER() FROM VERSIONS"/>
-        <current_db query="SELECT USER() FROM VERSIONS"/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="EXISTS(SELECT USER_ID FROM domain.users WHERE username=USER() AND usermode='SYSDBA')"/>
-        <users>
-            <inband query="SELECT username FROM domain.users"/>
-            <blind query="SELECT MIN(username) FROM domain.users WHERE username>'%s'" count="SELECT CHR(COUNT(*)) FROM domain.users"/>
-        </users>
-        <columns>
-            <inband query="SELECT columnname,datatype,len FROM domain.columns WHERE tablename='%s' AND schemaname=%s"/>
-            <blind/>
-        </columns>
-        <tables>
-            <inband query="SELECT tablename FROM domain.tables WHERE schemaname=%s AND type='TABLE'"/>
-            <blind/>
-        </tables> 
-        <dbs>
-            <inband query="SELECT DISTINCT(schemaname) FROM domain.tables"/>
-            <blind/>
-        </dbs>
-        <roles>
-            <inband query="SELECT owner,role FROM domain.roles" condition="owner"/>
-            <blind/>
-        </roles>
-        <statements/>
-        <dump_table>
-            <inband query="SELECT %s FROM %s"/>
-            <blind query="SELECT MIN(%s) FROM %s WHERE CHR(%s)>'%s'" query2="SELECT MAX(%s) FROM %s WHERE CHR(%s) LIKE '%s'" count="SELECT COUNT(*) FROM %s" count2="SELECT COUNT(*) FROM (SELECT DISTINCT %s FROM %s) AS qq"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT schemaname FROM domain.tables WHERE %s" condition="schemaname"/>
-            <blind query="SELECT DISTINCT(schemaname) FROM domain.tables WHERE %s" count="SELECT COUNT(DISTINCT(schemaname)) FROM domain.tables WHERE %s" condition="schemaname"/>
-        </search_db>
-   </dbms>
-
-    <dbms value="Sybase">
-        <cast query="CONVERT(VARCHAR(4000),%s)"/>
-        <length query="LTRIM(STR(LEN(%s)))"/>
-        <isnull query="ISNULL(%s,' ')"/>
-        <delimiter query="+"/>
-        <limit query="SELECT TOP %d "/>
-        <limitregexp query="TOP\s+([\d]+)\s+.+?\s+FROM\s+.+?\s+WHERE\s+.+?\s+NOT\s+IN\s+\(SELECT\s+TOP\s+([\d]+)\s+"/>
-        <limitgroupstart query="2"/>
-        <limitgroupstop query="1"/>
-        <limitstring/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--" query2="/*"/>
-        <substring query="SUBSTRING((%s),%d,%d)"/>
-        <concatenate query="%s+%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END)"/>
-        <hex query="BINTOSTR(CONVERT(VARBINARY,%s))"/>
-        <inference query="ASCII(SUBSTRING((%s),%d,1))>%d"/>
-        <banner query="SELECT @@VERSION"/>
-        <current_user query="SELECT SUSER_NAME()"/>
-        <current_db query="SELECT DB_NAME()"/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="PATINDEX('%sa_role%',SHOW_ROLE())>0" query2="EXISTS(SELECT * FROM master..syslogins,master..sysloginroles WHERE srid=0 and name='%s')"/>
-        <users>
-            <inband query="SELECT name FROM master..syslogins"/>
-            <blind/>
-        </users>
-        <passwords>
-            <inband query="SELECT name,password FROM master..syslogins" condition="name"/>
-            <blind/>
-        </passwords>
-        <privileges/>
-        <roles>
-            <inband query="SELECT name,srid FROM master..syslogins,master..sysloginroles" condition="name"/>
-            <blind/>
-        </roles>
-        <statements/>
-        <dbs>
-            <inband query="SELECT name FROM master..sysdatabases"/>
-            <blind/>
-        </dbs>
-        <tables>
-            <inband query="SELECT name FROM %s..sysobjects WHERE type IN ('U')"/>
-            <blind/>
-        </tables>
-        <columns>
-            <inband query="SELECT %s..syscolumns.name,%s..syscolumns.usertype FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id AND %s..sysobjects.name='%s'" condition="[DB]..syscolumns.name"/>
-            <blind/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s.%s"/>
-            <blind query="SELECT MIN(%s) FROM %s WHERE CONVERT(VARCHAR(4000),%s)>'%s'" query2="SELECT MAX(%s) FROM %s WHERE CONVERT(VARCHAR(4000),%s) LIKE '%s'" count="SELECT COUNT(*) FROM %s" count2="SELECT COUNT(*) FROM (SELECT DISTINCT %s FROM %s) AS qq"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT name FROM master..sysdatabases WHERE %s" condition="name"/>
-            <blind/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT name FROM %s..sysobjects WHERE type IN ('U') AND " condition="name" condition2="name"/>
-            <blind/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT %s..sysobjects.name FROM %s..syscolumns,%s..sysobjects WHERE %s..syscolumns.id=%s..sysobjects.id" condition="[DB]..syscolumns.name" condition2="[DB]..sysobjects.name"/>
-            <blind/>
-        </search_column>
-    </dbms>
-
-    <dbms value="IBM DB2">
-        <!-- Casting to varchar does not work with version < v9, so we had to use char(254) instead -->
-        <cast query="RTRIM(CAST(%s AS CHAR(254)))"/>
-        <length query="LENGTH(RTRIM(CAST(%s AS CHAR(254))))"/>
-        <isnull query="COALESCE(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="ROW_NUMBER() OVER () AS CAP %s) AS qq WHERE CAP"/>
-        <limitregexp query="ROW_NUMBER\(\)\s+OVER\s+\(\)\s+AS\s+.+?\s+FROM\s+.+?\)\s+WHERE\s+.+?\s*=\s*[\d]+"/>
-        <limitgroupstart/>
-        <limitgroupstop/>
-        <limitstring/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--"/>
-        <!-- TODO -->
-        <substring query="SUBSTR((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END) FROM SYSIBM.SYSDUMMY1"/>
-        <hex query="HEX(%s)"/>
-        <inference query="SUBSTR((%s),%d,1)>'%c'"/>
-        <!-- NOTE: We have to use the complicated UDB OLAP functions in query2 because sqlmap injects isnull query inside MAX function, else we would use: SELECT MAX(versionnumber) FROM sysibm.sysversions -->
-        <banner query="SELECT service_level FROM TABLE(sysproc.env_get_inst_info())" query2="SELECT versionnumber FROM (SELECT ROW_NUMBER() OVER (ORDER BY versionnumber DESC) AS CAP,versionnumber FROM sysibm.sysversions) AS qq WHERE CAP=1"/>
-        <current_user query="SELECT user FROM SYSIBM.SYSDUMMY1"/>
-        <!-- NOTE: On DB2 we use the current user as default schema (database) -->
-        <current_db query="SELECT user FROM SYSIBM.SYSDUMMY1"/>
-        <hostname query="SELECT host_name FROM TABLE(sysproc.env_get_sys_info())"/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="(SELECT dbadmauth FROM syscat.dbauth WHERE grantee=current user)='Y'"/>
-        <users>
-            <inband query="SELECT grantee FROM sysibm.sysdbauth WHERE grantee!='SYSTEM' AND grantee!='PUBLIC'"/>
-            <blind query="SELECT grantee FROM (SELECT ROW_NUMBER() OVER () AS CAP,grantee FROM sysibm.sysdbauth WHERE grantee!='SYSTEM' AND grantee!='PUBLIC') AS qq WHERE CAP=%d" count="SELECT COUNT(DISTINCT(grantee)) FROM sysibm.sysdbauth WHERE grantee!='SYSTEM' AND grantee!='PUBLIC'"/>
-        </users>
-        <!-- NOTE: On DB2 it is not possible to list password hashes, since they are handled by the OS -->        
-        <passwords/>
-        <privileges>
-            <inband query="SELECT grantee,RTRIM(tabschema)||'.'||tabname||','||controlauth||alterauth||deleteauth||indexauth||insertauth||refauth||selectauth||updateauth FROM syscat.tabauth" condition="grantee"/>
-            <blind query="SELECT tabschema||'.'||tabname||','||controlauth||alterauth||deleteauth||indexauth||insertauth||refauth||selectauth||updateauth FROM (SELECT ROW_NUMBER() OVER () AS CAP,syscat.tabauth.* FROM syscat.tabauth WHERE grantee='%s') AS qq WHERE CAP=%d" count="SELECT COUNT(*) FROM syscat.tabauth WHERE grantee='%s'"/>
-        </privileges>
-        <roles/>
-        <statements/>
-        <!-- NOTE: in DB2 schema names are the counterpart to database names on other DBMSes -->
-        <dbs>
-            <inband query="SELECT schemaname FROM syscat.schemata"/>
-            <blind query="SELECT schemaname FROM (SELECT ROW_NUMBER() OVER () AS CAP,schemaname FROM syscat.schemata) AS qq WHERE CAP=%d" count="SELECT COUNT(schemaname) FROM syscat.schemata"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT tabschema,tabname FROM sysstat.tables" condition="tabschema"/>
-            <blind query="SELECT tabname FROM (SELECT ROW_NUMBER() OVER () AS CAP,tabname FROM sysstat.tables WHERE tabschema='%s') AS qq WHERE CAP=INT('%d')" count="SELECT COUNT(*) FROM sysstat.tables WHERE tabschema='%s'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT name,RTRIM(coltype)||'('||RTRIM(CAST(length AS CHAR(254)))||')' FROM sysibm.syscolumns WHERE tbname='%s' AND tbcreator='%s'" condition="name"/>
-            <blind query="SELECT name FROM sysibm.syscolumns WHERE tbname='%s' AND tbcreator='%s'" query2="SELECT RTRIM(coltype)||'('||RTRIM(CAST(length AS CHAR(254)))||')' FROM sysibm.syscolumns WHERE tbname='%s' AND name='%s' AND tbcreator='%s'" count="SELECT COUNT(name) FROM sysibm.syscolumns WHERE tbname='%s' AND tbcreator='%s'" condition="name"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s"/>
-            <blind query="SELECT ENTRY_VALUE FROM (SELECT ROW_NUMBER() OVER () AS CAP,%s AS ENTRY_VALUE FROM %s) AS qq WHERE CAP=%d" count="SELECT COUNT(*) FROM %s"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT schemaname FROM syscat.schemata WHERE %s" condition="schemaname"/>
-            <blind query="SELECT schemaname FROM (SELECT DISTINCT(schemaname) FROM syscat.schemata WHERE %s) AS qq" count="SELECT COUNT(DISTINCT(schemaname)) FROM syscat.schemata WHERE %s" condition="schemaname"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT tabschema,tabname FROM sysstat.tables WHERE %s" condition="tabname" condition2="tabschema"/>
-            <blind query="SELECT tabschema FROM (SELECT DISTINCT(tabschema) FROM sysstat.tables WHERE %s) AS qq" query2="SELECT DISTINCT(tabname) FROM sysstat.tables WHERE tabschema='%s'" count="SELECT COUNT(DISTINCT(tabschema)) FROM sysstat.tables WHERE %s" count2="SELECT COUNT(tabname) FROM sysstat.tables WHERE tabschema='%s'" condition="tabname" condition2="tabschema"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT tabschema,tabname FROM sysstat.columns WHERE %s" condition="colname" condition2="tabschema" condition3="tabname"/>
-            <blind query="SELECT tabschema FROM (SELECT DISTINCT(tabschema) FROM sysstat.columns WHERE %s) AS qq" query2="SELECT DISTINCT(tabname) FROM sysstat.columns WHERE tabschema='%s'" count="SELECT COUNT(DISTINCT(tabschema)) FROM sysstat.columns WHERE %s" count2="SELECT COUNT(DISTINCT(tabname)) FROM sysstat.columns WHERE tabschema='%s'" condition="colname" condition2="tabschema" condition3="tabname"/>
-        </search_column>
-    </dbms>
-
-    <dbms value="HSQLDB">
-        <cast query="CAST(%s AS LONGVARCHAR)"/>
-        <length query="CHAR_LENGTH(%s)"/>
-        <isnull query="IFNULL(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="LIMIT %d %d" query2="LIMIT %d OFFSET %d"/>
-        <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
-        <limitgroupstart query="2"/>
-        <limitgroupstop query="1"/>
-        <limitstring query=" LIMIT "/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--" query2="/*" query3="//"/>
-        <substring query="SUBSTR((%s),%d,%d)"/>
-        <concatenate query="CONCAT(%s,%s)"/>
-        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
-        <!-- NOTE: RAWTOHEX() doesn't accept non-binary values -->
-        <!-- <hex query="RAWTOHEX(%s)"/> -->
-        <inference query="ASCII(SUBSTR((%s),%d,1))>%d"/>
-        <banner query="DATABASE_VERSION()"/>
-        <current_user query="CURRENT_USER"/>
-        <current_db query="DATABASE()"/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="SELECT ADMIN FROM INFORMATION_SCHEMA.SYSTEM_USERS WHERE USER_NAME=CURRENT_USER"/>
-        <check_udf/>
-        <users>
-            <!-- LIMIT is needed at start for v1.7 this gets mangled unless no-cast is used -->
-            <blind query="SELECT LIMIT %d 1 DISTINCT(user) FROM INFORMATION_SCHEMA.SYSTEM_USERS ORDER BY user" count="SELECT COUNT(DISTINCT(user)) FROM INFORMATION_SCHEMA.SYSTEM_USERS"/>
-            <inband query="SELECT user FROM INFORMATION_SCHEMA.SYSTEM_USERS ORDER BY user"/>
-        </users>
-        <passwords>
-            <!-- Passwords only shown in later versions &gt;=2.0  -->
-            <blind query="SELECT LIMIT %d 1 DISTINCT(password_digest) FROM INFORMATION_SCHEMA.SYSTEM_USERS WHERE user_name='%s' ORDER BY password_digest" count="SELECT COUNT(DISTINCT(password_digest)) FROM INFORMATION_SCHEMA.SYSTEM_USERS WHERE user_name='%s'"/>
-            <inband query="SELECT user_name,password_digest FROM INFORMATION_SCHEMA.SYSTEM_USERS ORDER BY user_name" condition="user_name"/>
-        </passwords>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <dbs>
-            <blind query="SELECT LIMIT %d 1 DISTINCT(table_schem) FROM INFORMATION_SCHEMA.SYSTEM_SCHEMAS ORDER BY table_schem" count="SELECT COUNT(table_schem) FROM INFORMATION_SCHEMA.SYSTEM_SCHEMAS"/>
-            <inband query="SELECT table_schem FROM INFORMATION_SCHEMA.SYSTEM_SCHEMAS ORDER BY table_schem" />
-        </dbs>
-        <tables>
-            <blind query="SELECT LIMIT %d 1 table_name FROM INFORMATION_SCHEMA.SYSTEM_TABLES WHERE table_schem='%s' ORDER BY table_name" count="SELECT COUNT(table_name) FROM INFORMATION_SCHEMA.SYSTEM_TABLES WHERE table_schem='%s'"/>
-            <inband query="SELECT table_schem,table_name FROM INFORMATION_SCHEMA.SYSTEM_TABLES ORDER BY table_schem" condition="table_schem"/>
-        </tables>
-        <columns>
-            <blind query="SELECT column_name FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE table_name='%s' AND table_schem='%s' ORDER BY column_name" query2="SELECT column_type FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE table_name='%s' AND column_name='%s' AND table_schem='%s'" count="SELECT COUNT(column_name) FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE table_name='%s' AND table_schem='%s'" condition="column_name"/>
-            <inband query="SELECT column_name,type_name FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE table_name='%s' AND table_schem='%s' ORDER BY column_name" condition="column_name"/>
-        </columns>
-        <dump_table>
-            <blind query="SELECT %s FROM %s.%s ORDER BY %s LIMIT 1 OFFSET %d" count="SELECT COUNT(*) FROM %s.%s"/>
-            <inband query="SELECT %s FROM %s.%s ORDER BY %s"/>
-        </dump_table>
-        <search_db>
-            <blind query="SELECT DISTINCT(table_schem) FROM INFORMATION_SCHEMA.SYSTEM_SCHEMAS WHERE %s" count="SELECT COUNT(DISTINCT(table_schem)) FROM INFORMATION_SCHEMA.SYSTEM_SCHEMAS WHERE %s" condition="table_schem"/>
-            <inband query="SELECT table_schem FROM INFORMATION_SCHEMA.SYSTEM_SCHEMAS WHERE %s" condition="table_schem"/>
-        </search_db>
-        <search_table>
-            <blind query="SELECT DISTINCT(table_schem) FROM INFORMATION_SCHEMA.SYSTEM_TABLES WHERE %s" query2="SELECT DISTINCT(table_name) FROM INFORMATION_SCHEMA.SYSTEM_TABLES WHERE table_schem='%s'" count="SELECT COUNT(DISTINCT(table_schem)) FROM INFORMATION_SCHEMA.SYSTEM_TABLES WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM INFORMATION_SCHEMA.SYSTEM_TABLES WHERE table_schem='%s'" condition="table_name" condition2="table_schem"/>
-            <inband query="SELECT table_schem,table_name FROM INFORMATION_SCHEMA.SYSTEM_TABLES WHERE %s" condition="table_name" condition2="table_schem"/>
-        </search_table>
-        <search_column>
-            <blind query="SELECT DISTINCT(table_schem) FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE %s" query2="SELECT DISTINCT(table_name) FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE table_schem='%s'" count="SELECT COUNT(DISTINCT(table_schem)) FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE table_schem='%s'" condition="column_name" condition2="table_schem" condition3="table_name"/>
-            <inband query="SELECT table_schem,table_name FROM INFORMATION_SCHEMA.SYSTEM_COLUMNS WHERE %s" condition="column_name" condition2="table_schem" condition3="table_name"/>
-        </search_column>
-    </dbms>
-
-    <dbms value="H2">
-        <cast query="CAST(%s AS LONGVARCHAR)"/>
-        <length query="CHAR_LENGTH(%s)"/>
-        <isnull query="IFNULL(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="LIMIT %d OFFSET %d"/>
-        <limitregexp query="\s+LIMIT\s+([\d]+)\s+OFFSET\s+([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
-        <limitgroupstart query="2"/>
-        <limitgroupstop query="1"/>
-        <limitstring query=" OFFSET "/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--" query2="//"/>
-        <substring query="SUBSTR((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
-        <hex query="RAWTOHEX(%s)"/>
-        <inference query="ASCII(SUBSTR((%s),%d,1))>%d"/>
-        <banner query="H2VERSION()"/>
-        <current_user query="CURRENT_USER"/>
+        
+        <!-- 推断字段中某个字符的 ASCII 码是否大于指定值 -->
+        <inference query="ORD(MID((%s),%d,1))>%d"/>
+        
+        <!-- 获取数据库版本信息 -->
+        <banner query="VERSION()"/>
+        
+        <!-- 获取当前用户 -->
+        <current_user query="CURRENT_USER()"/>
+        
+        <!-- 获取当前数据库名称 -->
         <current_db query="DATABASE()"/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="SELECT CURRENT_USER='SA'"/>
-        <check_udf/>
-        <users>
-            <inband query="SELECT NAME FROM INFORMATION_SCHEMA.USERS"/>
-            <blind query="SELECT NAME FROM INFORMATION_SCHEMA.USERS LIMIT 1 OFFSET %d" count="SELECT COUNT(NAME) FROM INFORMATION_SCHEMA.USERS"/>
-        </users>
-        <passwords/>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <dbs>
-            <inband query="SELECT SCHEMA_NAME FROM INFORMATION_SCHEMA.SCHEMATA"/>
-            <blind query="SELECT SCHEMA_NAME FROM INFORMATION_SCHEMA.SCHEMATA LIMIT 1 OFFSET %d" count="SELECT COUNT(SCHEMA_NAME) FROM INFORMATION_SCHEMA.SCHEMATA"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT TABLE_SCHEMA,TABLE_NAME FROM INFORMATION_SCHEMA.TABLES" condition="TABLE_SCHEMA"/>
-            <blind query="SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA='%s' LIMIT 1 OFFSET %d" count="SELECT COUNT(TABLE_NAME) FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA='%s'"/>
-        </tables>
-        <columns>
-            <blind query="SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME='%s' AND TABLE_SCHEMA='%s' ORDER BY COLUMN_NAME" query2="SELECT TYPE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME='%s' AND COLUMN_NAME='%s' AND TABLE_SCHEMA='%s'" count="SELECT COUNT(COLUMN_NAME) FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME='%s' AND TABLE_SCHEMA='%s'" condition="COLUMN_NAME"/>
-            <inband query="SELECT COLUMN_NAME,TYPE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME='%s' AND TABLE_SCHEMA='%s' ORDER BY COLUMN_NAME" condition="COLUMN_NAME"/>
-        </columns>
-        <dump_table>
-            <blind query="SELECT %s FROM %s.%s ORDER BY %s LIMIT 1 OFFSET %d" count="SELECT COUNT(*) FROM %s.%s"/>
-            <inband query="SELECT %s FROM %s.%s ORDER BY %s"/>
-        </dump_table>
-        <search_db>
-            <blind query="SELECT SCHEMA_NAME FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" count="SELECT COUNT(SCHEMA_NAME) FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" condition="SCHEMA_NAME"/>
-            <inband query="SELECT SCHEMA_NAME FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" condition="SCHEMA_NAME"/>
-        </search_db>
-        <search_table>
-            <blind query="SELECT DISTINCT(TABLE_SCHEMA) FROM INFORMATION_SCHEMA.TABLES WHERE %s ORDER BY 1" query2="SELECT DISTINCT(TABLE_NAME) FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA='%s' ORDER BY 1" count="SELECT COUNT(DISTINCT(TABLE_SCHEMA)) FROM INFORMATION_SCHEMA.TABLES WHERE %s" count2="SELECT COUNT(DISTINCT(TABLE_NAME)) FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA='%s'" condition="TABLE_NAME" condition2="TABLE_SCHEMA"/>
-            <inband query="SELECT TABLE_SCHEMA,TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE %s" condition="TABLE_NAME" condition2="TABLE_SCHEMA"/>
-        </search_table>
-        <search_column>
-            <blind query="SELECT DISTINCT(TABLE_SCHEMA) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s ORDER BY 1" query2="SELECT DISTINCT(TABLE_NAME) FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA='%s' ORDER BY 1" count="SELECT COUNT(DISTINCT(TABLE_SCHEMA)) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" count2="SELECT COUNT(DISTINCT(TABLE_NAME)) FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA='%s'" condition="column_name" condition2="TABLE_SCHEMA" condition3="TABLE_NAME"/>
-            <inband query="SELECT TABLE_SCHEMA,TABLE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" condition="COLUMN_NAME" condition2="TABLE_SCHEMA" condition3="TABLE_NAME"/>
-        </search_column>
-    </dbms>
-
-    <dbms value="Informix">
-        <cast query="RTRIM(TO_CHAR(%s))"/>
-        <length query="CHAR_LENGTH(RTRIM(%s))"/>
-        <isnull query="NVL(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="SELECT SKIP %d LIMIT 1"/>
-        <limitregexp query="\s+SKIP\s+([\d]+)\s*LIMIT\s*([\d]+)"/>
-        <limitgroupstart query="1"/>
-        <limitgroupstop query="2"/>
-        <limitstring query=" LIMIT "/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--"/>
-        <substring query="SUBSTR((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END) FROM SYSMASTER:SYSDUAL"/>
-        <!-- NOTE: HEX() only accepts integer values -->
-        <!-- <hex query="HEX(%s)"/> -->
-        <!-- http://www.dbforums.com/showthread.php?1660588-select-first-and-union&p=6478613#post6478613 -->
-        <inference query="ASCII(SUBSTR((SELECT * FROM (%s)),%d,1))>%d"/>
-        <banner query="SELECT DBINFO('VERSION','FULL') FROM SYSMASTER:SYSDUAL"/>
-        <current_user query="SELECT USER FROM SYSMASTER:SYSDUAL"/>
-        <current_db query="SELECT DBINFO('DBNAME') FROM SYSMASTER:SYSDUAL"/>
-        <hostname query="SELECT DBINFO('DBHOSTNAME') FROM SYSMASTER:SYSDUAL"/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="(SELECT USERTYPE FROM SYSUSERS WHERE USERNAME=USER)='D'"/>
+        
+        <!-- 获取数据库服务器的主机名 -->
+        <hostname query="@@HOSTNAME"/>
+        
+        <!-- 获取指定表的注释信息 -->
+        <table_comment query="SELECT table_comment FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' AND table_name='%s'"/>
+        
+        <!-- 获取指定列的注释信息 -->
+        <column_comment query="SELECT column_comment FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s' AND table_name='%s' AND column_name='%s'"/>
+        
+        <!-- 检查当前用户是否具有 DBA 权限 -->
+        <is_dba query="(SELECT super_priv FROM mysql.user WHERE user='%s' LIMIT 0,1)='Y'"/>
+        
+        <!-- 检查是否存在指定的用户定义函数 (UDF) -->
+        <check_udf query="(SELECT name FROM mysql.func WHERE name='%s' LIMIT 0,1)='%s'"/>
+        
+        <!-- 用户相关的查询模板 -->
         <users>
-            <inband query="SELECT USERNAME FROM SYSUSERS"/>
-            <blind query="SELECT SKIP %d LIMIT 1 USERNAME FROM SYSUSERS ORDER BY USERNAME" count="SELECT COUNT(USERNAME) FROM SYSUSERS"/>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="SELECT user FROM mysql.user" query3="SELECT username FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+            
+            <!-- 盲注查询，获取指定位置的用户信息 -->
+            <blind query="SELECT DISTINCT(grantee) FROM INFORMATION_SCHEMA.USER_PRIVILEGES LIMIT %d,1" query2="SELECT DISTINCT(user) FROM mysql.user LIMIT %d,1" query3="SELECT DISTINCT(username) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS LIMIT %d,1" count="SELECT COUNT(DISTINCT(grantee)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES" count2="SELECT COUNT(DISTINCT(user)) FROM mysql.user" count3="SELECT COUNT(DISTINCT(username)) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
         </users>
+        
+        <!-- 密码相关的查询模板 -->
         <passwords>
-            <inband query="SELECT USERNAME,HASHED_PASSWORD||':'||SALT FROM SYSUSER:SYSINTAUTHUSERS" condition="USERNAME"/>
-            <blind query="SELECT HASHED_PASSWORD||':'||SALT FROM SYSUSER:SYSINTAUTHUSERS WHERE USERNAME='%s'"/>
+            <!-- 获取所有用户的用户名和密码哈希 -->
+            <inband query="SELECT user,authentication_string FROM mysql.user" condition="user"/>
+            
+            <!-- 盲注查询，获取指定用户的密码哈希 -->
+            <blind query="SELECT DISTINCT(authentication_string) FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(authentication_string)) FROM mysql.user WHERE user='%s'"/>
         </passwords>
-        <privileges>
-            <inband query="SELECT USERNAME,USERTYPE FROM SYSUSERS" condition="USERNAME"/>
-            <blind query="SELECT USERTYPE FROM SYSUSERS WHERE USERNAME='%s'"/>
-        </privileges>
-        <roles/>
-        <statements/>
-        <dbs>
-            <inband query="SELECT NAME FROM SYSMASTER:SYSDATABASES"/>
-            <blind query="SELECT SKIP %d LIMIT 1 NAME FROM SYSMASTER:SYSDATABASES ORDER BY NAME" count="SELECT COUNT(NAME) FROM SYSMASTER:SYSDATABASES"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT TABNAME FROM %s:SYSTABLES WHERE TABTYPE='T' AND TABID>99"/>
-            <blind query="SELECT SKIP %d LIMIT 1 TABNAME FROM %s:SYSTABLES WHERE TABTYPE='T' AND TABID>99 ORDER BY TABNAME" count="SELECT COUNT(TABNAME) FROM %s:SYSTABLES WHERE TABTYPE='T' AND TABID>99"/>
-        </tables>
-        <columns>
-            <inband query="SELECT COLNAME,COLTYPE FROM %s:SYSTABLES,%s:SYSCOLUMNS WHERE %s:SYSTABLES.TABID=%s:SYSCOLUMNS.TABID AND %s:SYSTABLES.TABNAME='%s'" condition="COLNAME"/>
-            <blind query="SELECT SKIP %d LIMIT 1 COLNAME FROM %s:SYSTABLES,%s:SYSCOLUMNS WHERE %s:SYSTABLES.TABID=%s:SYSCOLUMNS.TABID AND %s:SYSTABLES.TABNAME='%s' ORDER BY COLNAME" query2="SELECT COLTYPE FROM %s:SYSTABLES,%s:SYSCOLUMNS WHERE %s:SYSTABLES.TABID=%s:SYSCOLUMNS.TABID AND %s:SYSTABLES.TABNAME='%s' AND COLNAME='%s'" count="SELECT COUNT(COLNAME) FROM %s:SYSTABLES,%s:SYSCOLUMNS WHERE %s:SYSTABLES.TABID=%s:SYSCOLUMNS.TABID AND %s:SYSTABLES.TABNAME='%s'"  condition="COLNAME"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s:%s"/>
-            <blind query="SELECT MIN(%s) FROM %s WHERE RTRIM(TO_CHAR(%s))>'%s'" query2="SELECT MAX(%s) FROM %s WHERE RTRIM(TO_CHAR(%s)) LIKE '%s'" count="SELECT COUNT(*) FROM %s:%s" count2="SELECT COUNT(DISTINCT %s) FROM %s"/>
-        </dump_table>
-        <search_db/>
-        <search_table/>
-        <search_column/>
-    </dbms>
-
-    <dbms value="MonetDB">
-        <cast query="CAST(%s AS VARCHAR(4000))"/>
-        <length query="LENGTH(%s)"/>
-        <isnull query="COALESCE(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="LIMIT %d OFFSET %d"/>
-        <limitregexp query="\s+LIMIT\s+([\d]+)\s*OFFSET\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
-        <limitgroupstart query="2"/>
-        <limitgroupstop query="1"/>
-        <limitstring query=" LIMIT "/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <comment query="--" query2="#"/>
-        <substring query="SUBSTRING((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
-        <inference query="ASCII(SUBSTRING((%s),%d,1))>%d"/>
-        <banner query="SELECT value FROM environment WHERE name='monet_version'"/>
-        <current_user query="CURRENT_USER"/>
-        <current_db query="SELECT CURRENT_SCHEMA" query2="SELECT value FROM environment WHERE name='gdk_dbname'"/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba query="(SELECT grantor FROM auths WHERE name=CURRENT_USER)=0"/>
-        <check_udf/>
-        <users>
-            <inband query="SELECT name FROM sys.users"/>
-            <!-- NOTE: LIMIT %d OFFSET %d not supported inside subqueries -->
-            <blind query="SELECT name FROM (SELECT name,row_number() over() AS y FROM sys.users)x WHERE x.y-1=%d" count="SELECT COUNT(name) FROM sys.users"/>
-        </users>
-        <passwords/>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <dbs>
-            <inband query="SELECT name FROM schemas"/>
-            <blind query="SELECT name FROM (SELECT name,row_number() over() AS y FROM sys.schemas)x WHERE x.y-1=%d" count="SELECT COUNT(DISTINCT(name)) FROM schemas"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT schemas.name,tables.name FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false"/>
-            <blind query="SELECT name FROM (SELECT tables.name,row_number() over() AS y FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false AND schemas.name='%s')x WHERE x.y-1=%d" count="SELECT COUNT(DISTINCT(tables.name)) FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false AND schemas.name='%s'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT name,type FROM columns WHERE table_id=(SELECT tables.id FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.name='%s' AND schemas.name='%s' AND tables.id=table_id)" condition="name"/>
-            <blind query="SELECT name FROM (SELECT name,row_number() over() AS y FROM columns WHERE table_id=(SELECT tables.id FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.name='%s' AND schemas.name='%s'))x WHERE x.y-1=%d" query2="SELECT type FROM columns WHERE name='%s' AND table_id=(SELECT tables.id FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.name='%s' AND schemas.name='%s')" count="SELECT COUNT(name) FROM columns WHERE table_id=(SELECT tables.id FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.name='%s' AND schemas.name='%s')" condition="name"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s.%s"/>
-            <blind query="SELECT z FROM (SELECT %s AS z,row_number() over() AS y FROM %s.%s)x WHERE x.y-1=%d" count="SELECT COUNT(*) FROM %s.%s"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT schemas.name FROM schemas WHERE %s" condition="schemas.name"/>
-            <blind query="SELECT DISTINCT(schemas.name) FROM schemas WHERE %s" count="SELECT COUNT(DISTINCT(schemas.name)) FROM schemas WHERE %s" condition="schemas.name"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT schemas.name,tables.name FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false AND %s" condition="tables.name" condition2="schemas.name"/>
-            <blind query="SELECT DISTINCT(schemas.name) FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false AND %s" query2="SELECT DISTINCT(tables.name) FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false AND schemas.name='%s'" count="SELECT COUNT(DISTINCT(tables.name)) FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false AND schemas.name='%s'" count2="SELECT COUNT(DISTINCT(tables.name)) FROM tables JOIN schemas ON schema_id=schemas.id WHERE tables.system=false AND schemas.name='%s'" condition="tables.name" condition2="schemas.name"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT schemas.name,tables.name FROM tables JOIN schemas ON tables.schema_id=schemas.id JOIN columns ON tables.id=columns.table_id WHERE %s" condition="columns.name" condition2="schemas.name" condition3="tables.name"/>
-            <blind query="SELECT DISTINCT(schemas.name) FROM tables JOIN schemas ON tables.schema_id=schemas.id JOIN columns ON tables.id=columns.table_id WHERE %s" query2="SELECT DISTINCT(tables.name) FROM tables JOIN schemas ON tables.schema_id=schemas.id JOIN columns ON tables.id=columns.table_id WHERE schemas.name='%s'" count="SELECT COUNT(DISTINCT(schemas.name)) FROM tables JOIN schemas ON tables.schema_id=schemas.id JOIN columns ON tables.id=columns.table_id WHERE %s" count2="SELECT COUNT(DISTINCT(tables.name)) FROM tables JOIN schemas ON tables.schema_id=schemas.id JOIN columns ON tables.id=columns.table_id WHERE schemas.name='%s'" condition="columns.name" condition2="schemas.name" condition3="tables.name"/>
-        </search_column>
-    </dbms>
-
-    <dbms value="Apache Derby">
-        <!-- NOTE: CHAR(%s) causes 'A truncation error was encountered trying to shrink CHAR' -->
-        <cast query="RTRIM(CAST(%s AS CHAR(254)))"/>
-        <length query="LENGTH(RTRIM(CAST(%s AS CHAR(254))))"/>
-        <isnull query="COALESCE(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="OFFSET %d ROWS FETCH FIRST %d ROWS ONLY"/>
-        <limitregexp query="OFFSET\s+([\d]+)\s+ROWS\s+FETCH\s+FIRST\s+([\d]+)\s+ROWS\s+ONLY"/>
-        <limitgroupstart query="1"/>
-        <limitgroupstop query="2"/>
-        <limitstring/>
-        <order query="ORDER BY %s ASC"/>
-        <count query="COUNT(%s)"/>
-        <!-- NOTE: comment without alphanumeric char in continuation is invalid -->
-        <comment query="--x"/>
-        <substring query="SUBSTR((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <!-- NOTE: Apache Derby does not support implicit conversion from int to string -->
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END) FROM SYSIBM.SYSDUMMY1"/>
-        <inference query="SUBSTR((%s),%d,1)>'%c'"/>
-        <banner/>
-        <current_user query="SELECT USER FROM SYSIBM.SYSDUMMY1"/>
-        <current_db query="SELECT CURRENT SCHEMA FROM SYSIBM.SYSDUMMY1"/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <!-- NOTE: ERROR 4251D: Only the database owner can perform this operation. -->
-        <is_dba query="(SELECT COUNT(*) FROM SYS.SYSUSERS)>=0"/>
-        <dbs>
-            <inband query="SELECT SCHEMANAME FROM SYS.SYSSCHEMAS"/>
-            <blind query="SELECT SCHEMANAME FROM SYS.SYSSCHEMAS OFFSET %d ROWS FETCH FIRST 1 ROW ONLY" count="SELECT COUNT(SCHEMANAME) FROM SYS.SYSSCHEMAS"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT SCHEMANAME,TABLENAME FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID" condition="SCHEMANAME"/>
-            <blind query="SELECT TABLENAME FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE SCHEMANAME='%s' OFFSET %d ROWS FETCH FIRST 1 ROW ONLY" count="SELECT COUNT(TABLENAME) FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE SCHEMANAME='%s'"/>
-        </tables>
-        <columns>
-            <!-- NOTE: COLUMNDATATYPE without CAST() causes problems during enumeration -->
-            <inband query="SELECT COLUMNNAME,RTRIM(CAST(COLUMNDATATYPE AS CHAR(254))) FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE TABLENAME='%s' AND SCHEMANAME='%s'" condition="COLUMNNAME"/>
-            <blind query="SELECT COLUMNNAME FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE TABLENAME='%s' AND SCHEMANAME='%s'" query2="SELECT COLUMNDATATYPE FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE TABLENAME='%s' AND COLUMNNAME='%s' AND SCHEMANAME='%s'" count="SELECT COUNT(COLUMNNAME) FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE TABLENAME='%s' AND SCHEMANAME='%s'" condition="COLUMNNAME"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s"/>
-            <blind query="SELECT %s FROM %s OFFSET %d ROWS FETCH FIRST 1 ROW ONLY" count="SELECT COUNT(*) FROM %s"/>
-        </dump_table>
-        <users>
-            <inband query="SELECT USERNAME FROM SYS.SYSUSERS"/>
-            <blind query="SELECT USERNAME FROM SYS.SYSUSERS OFFSET %d ROWS FETCH FIRST 1 ROW ONLY" count="SELECT COUNT(USERNAME) FROM SYS.SYSUSERS"/>
-        </users>
-        <!-- NOTE: No one can view the 'SYSUSERS'.'PASSWORD' column -->
-        <passwords/>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <search_db>
-            <inband query="SELECT SCHEMANAME FROM SYS.SYSSCHEMAS WHERE %s" condition="SCHEMANAME"/>
-            <blind query="SELECT DISTINCT(SCHEMANAME) FROM SYS.SYSSCHEMAS WHERE %s" count="SELECT COUNT(DISTINCT(SCHEMANAME)) FROM SYS.SYSSCHEMAS WHERE %s" condition="SCHEMANAME"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT SCHEMANAME,TABLENAME FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE %s" condition="TABLENAME" condition2="SCHEMANAME"/>
-            <blind query="SELECT DISTINCT(SCHEMANAME) FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE %s" query2="SELECT DISTINCT(TABLENAME) FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE SCHEMANAME='%s'" count="SELECT COUNT(DISTINCT(SCHEMANAME)) FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE %s" count2="SELECT COUNT(DISTINCT(TABLENAME)) FROM SYS.SYSTABLES JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE SCHEMANAME='%s'" condition="TABLENAME" condition2="SCHEMANAME"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT SCHEMANAME,TABLENAME FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE %s" condition="COLUMNNAME" condition2="SCHEMANAME" condition3="TABLENAME"/>
-            <blind query="SELECT DISTINCT(SCHEMANAME) FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE %s" count="SELECT COUNT(DISTINCT(SCHEMANAME)) FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE %s" query2="SELECT DISTINCT(TABLENAME) FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE %s" count2="SELECT COUNT(DISTINCT(TABLENAME)) FROM SYS.SYSCOLUMNS JOIN SYS.SYSTABLES ON SYS.SYSCOLUMNS.REFERENCEID=SYS.SYSTABLES.TABLEID JOIN SYS.SYSSCHEMAS ON SYS.SYSTABLES.SCHEMAID=SYS.SYSSCHEMAS.SCHEMAID WHERE SCHEMANAME='%s'" condition="COLUMNNAME" condition2="SCHEMANAME" condition3="TABLENAME"/>
-        </search_column>
-   </dbms>
+        
+        <!-- 权限相关的查询模板 -->
+        <privileges>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="SELECT user,select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user" condition2="user"/>
+            
+            <!-- 盲注查询，获取指定用户的权限信息 -->
+            <blind query="SELECT DISTINCT(privilege_type) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s' LIMIT %d,1" query2="SELECT select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(privilege_type)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s'" count2="SELECT COUNT(*) FROM mysql.user WHERE user='%s'"/>
+        </privileges>
 
-    <dbms value="Vertica">
-        <cast query="CAST(%s AS CHARACTER(10000))"/>
-        <length query="LENGTH(%s)"/>
-        <isnull query="COALESCE(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="OFFSET %d LIMIT %d"/>
-        <limitregexp query="\s+OFFSET\s+([\d]+)\s+LIMIT\s+([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- XML 文件声明，指定版本为 1.0，编码为 UTF-8 -->
+
+<root>
+    <!-- 根元素，包含所有数据库相关的查询模板 -->
+
+    <dbms value="MySQL">
+        <!-- 定义 MySQL 数据库管理系统相关的查询模板 -->
+
+        <!-- 将字段转换为 NCHAR 类型 -->
+        <cast query="CAST(%s AS NCHAR)"/>
+        
+        <!-- 获取字段的字符长度 -->
+        <length query="CHAR_LENGTH(%s)"/>
+        
+        <!-- 判断字段是否为 NULL，如果是则返回空格 -->
+        <isnull query="IFNULL(%s,' ')"/>
+        
+        <!-- 定义字段分隔符为逗号 -->
+        <delimiter query=","/>
+        
+        <!-- 定义 LIMIT 子句，用于分页查询 -->
+        <limit query="LIMIT %d,%d"/>
+        
+        <!-- 正则表达式匹配 LIMIT 子句，支持两种格式：LIMIT d,d 和 LIMIT d -->
+        <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+        
+        <!-- 定义 LIMIT 子句中起始位置的分组索引 -->
         <limitgroupstart query="1"/>
+        
+        <!-- 定义 LIMIT 子句中结束位置的分组索引 -->
         <limitgroupstop query="2"/>
-        <limitstring query=" OFFSET "/>
+        
+        <!-- 定义 LIMIT 子句的字符串表示 -->
+        <limitstring query=" LIMIT "/>
+        
+        <!-- 定义 ORDER BY 子句，按指定字段升序排序 -->
         <order query="ORDER BY %s ASC"/>
+        
+        <!-- 计算字段的行数 -->
         <count query="COUNT(%s)"/>
-        <comment query="--"/>
-        <substring query="SUBSTRING((%s) FROM %d FOR %d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END)"/>
-        <!-- NOTE: requires >=9.1.1 because of 'cannot cast type varchar to varbinary' -->
-        <hex query="TO_HEX((%s)::varbinary)"/>
-        <inference query="ASCII(SUBSTRING((%s)::varchar FROM %d FOR 1))>%d"/>
+        
+        <!-- 定义 SQL 注释的三种形式：-- -、/* 和 # -->
+        <comment query="-- -" query2="/*" query3="#"/>
+        
+        <!-- 获取字段的子字符串 -->
+        <substring query="MID((%s),%d,%d)"/>
+        
+        <!-- 连接两个字符串 -->
+        <concatenate query="CONCAT(%s,%s)"/>
+        
+        <!-- 使用 CASE 语句进行条件判断 -->
+        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
+        
+        <!-- 将字段转换为十六进制表示 -->
+        <hex query="HEX(%s)"/>
+        
+        <!-- 推断字段中某个字符的 ASCII 码是否大于指定值 -->
+        <inference query="ORD(MID((%s),%d,1))>%d"/>
+        
+        <!-- 获取数据库版本信息 -->
         <banner query="VERSION()"/>
-        <current_user query="CURRENT_USER"/>
-        <current_db query="CURRENT_SCHEMA()"/>
-        <hostname query="SELECT MIN(node_name) FROM v_catalog.nodes"/>
-        <table_comment query="SELECT comment FROM v_catalog.comments WHERE object_type='TABLE' AND object_schema='%s' AND object_name='%s'"/>
-        <!-- NOTE: Vertica uses "projection columns" in case of column comments (e.g. testusers_super.surname) -->
-        <column_comment query="SELECT comment FROM v_catalog.comments WHERE object_type='COLUMN' AND object_schema='%s' AND object_name LIKE '%.%s'"/>
-        <is_dba query="(SELECT is_super_user FROM v_catalog.users WHERE user_name=CURRENT_USER OFFSET 0 LIMIT 1)"/>
-        <check_udf query="(SELECT procedure_name='%s' FROM v_catalog.user_procedures WHERE procedure_name='%s' OFFSET 0 LIMIT 1)"/>
+        
+        <!-- 获取当前用户 -->
+        <current_user query="CURRENT_USER()"/>
+        
+        <!-- 获取当前数据库名称 -->
+        <current_db query="DATABASE()"/>
+        
+        <!-- 获取数据库服务器的主机名 -->
+        <hostname query="@@HOSTNAME"/>
+        
+        <!-- 获取指定表的注释信息 -->
+        <table_comment query="SELECT table_comment FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' AND table_name='%s'"/>
+        
+        <!-- 获取指定列的注释信息 -->
+        <column_comment query="SELECT column_comment FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s' AND table_name='%s' AND column_name='%s'"/>
+        
+        <!-- 检查当前用户是否具有 DBA 权限 -->
+        <is_dba query="(SELECT super_priv FROM mysql.user WHERE user='%s' LIMIT 0,1)='Y'"/>
+        
+        <!-- 检查是否存在指定的用户定义函数 (UDF) -->
+        <check_udf query="(SELECT name FROM mysql.func WHERE name='%s' LIMIT 0,1)='%s'"/>
+        
+        <!-- 用户相关的查询模板 -->
         <users>
-            <inband query="SELECT user_name FROM v_catalog.users"/>
-            <blind query="SELECT user_name FROM v_catalog.users OFFSET %d LIMIT 1" count="SELECT COUNT(user_name) FROM v_catalog.users"/>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="SELECT user FROM mysql.user" query3="SELECT username FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+            
+            <!-- 盲注查询，获取指定位置的用户信息 -->
+            <blind query="SELECT DISTINCT(grantee) FROM INFORMATION_SCHEMA.USER_PRIVILEGES LIMIT %d,1" query2="SELECT DISTINCT(user) FROM mysql.user LIMIT %d,1" query3="SELECT DISTINCT(username) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS LIMIT %d,1" count="SELECT COUNT(DISTINCT(grantee)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES" count2="SELECT COUNT(DISTINCT(user)) FROM mysql.user" count3="SELECT COUNT(DISTINCT(username)) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
         </users>
+        
+        <!-- 密码相关的查询模板 -->
         <passwords>
-            <inband query="SELECT user_name,password FROM v_catalog.passwords" condition="user_name"/>
-            <blind query="SELECT password FROM v_catalog.passwords WHERE user_name='%s' OFFSET %d LIMIT 1" count="SELECT COUNT(password) FROM v_catalog.passwords WHERE user_name='%s'"/>
+            <!-- 获取所有用户的用户名和密码哈希 -->
+            <inband query="SELECT user,authentication_string FROM mysql.user" condition="user"/>
+            
+            <!-- 盲注查询，获取指定用户的密码哈希 -->
+            <blind query="SELECT DISTINCT(authentication_string) FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(authentication_string)) FROM mysql.user WHERE user='%s'"/>
         </passwords>
+        
+        <!-- 权限相关的查询模板 -->
         <privileges>
-            <inband query="SELECT grantee,privileges_description FROM v_catalog.grants WHERE object_type!='PROCEDURE'" condition="grantee"/>
-            <!-- NOTE: Vertica does not cache DISTINCT queries (must use ORDER BY to have consistent results) -->
-            <blind query="SELECT DISTINCT(privileges_description) FROM v_catalog.grants WHERE grantee='%s' ORDER BY 1 LIMIT 1 OFFSET %d" count="SELECT COUNT(DISTINCT(privileges_description)) FROM grants WHERE grantee='%s'"/>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="SELECT user,select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user" condition2="user"/>
+            
+            <!-- 盲注查询，获取指定用户的权限信息 -->
+            <blind query="SELECT DISTINCT(privilege_type) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s' LIMIT %d,1" query2="SELECT select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(privilege_type)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s'" count2="SELECT COUNT(*) FROM mysql.user WHERE user='%s'"/>
         </privileges>
-        <roles/>
-        <statements>
-            <inband query="SELECT current_statement FROM v_monitor.sessions"/>
-            <blind query="SELECT DISTINCT(current_statement) FROM v_monitor.sessions ORDER BY 1 OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(current_statement)) FROM v_monitor.sessions"/>
-        </statements>
-        <dbs>
-            <inband query="SELECT schema_name FROM v_catalog.schemata"/>
-            <blind query="SELECT DISTINCT(schema_name) FROM v_catalog.schemata ORDER BY 1 OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(schema_name)) FROM v_catalog.schemata"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT schema_name,table_name FROM v_catalog.all_tables" condition="schema_name"/>
-            <blind query="SELECT table_name FROM v_catalog.all_tables WHERE schema_name='%s' OFFSET %d LIMIT 1" count="SELECT COUNT(table_name) FROM v_catalog.all_tables WHERE schema_name='%s'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT column_name,data_type FROM v_catalog.columns WHERE table_name='%s' AND table_schema='%s'" condition="column_name"/>
-            <blind query="SELECT column_name FROM v_catalog.columns WHERE table_name='%s' AND table_schema='%s'" query2="SELECT data_type FROM v_catalog.columns WHERE table_name='%s' AND column_name='%s' AND table_schema='%s'" count="SELECT COUNT(column_name) FROM v_catalog.columns WHERE table_name='%s' AND table_schema='%s'" condition="column_name"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s.%s ORDER BY %s"/>
-            <blind query="SELECT %s FROM %s.%s ORDER BY %s OFFSET %d LIMIT 1" count="SELECT COUNT(*) FROM %s.%s"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT schema_name FROM v_catalog.schemata WHERE %s" condition="schema_name"/>
-            <blind query="SELECT DISTINCT(schema_name) FROM v_catalog.schemata WHERE %s ORDER BY 1" count="SELECT COUNT(DISTINCT(schema_name)) FROM v_catalog.schemata WHERE %s" condition="schema_name"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT schema_name,table_name FROM v_catalog.all_tables WHERE %s" condition="table_name" condition2="schema_name"/>
-            <blind query="SELECT DISTINCT(schema_name) FROM v_catalog.all_tables WHERE %s ORDER BY 1" query2="SELECT table_name FROM v_catalog.all_tables WHERE schema_name='%s'" count="SELECT COUNT(DISTINCT(schema_name)) FROM v_catalog.all_tables WHERE %s" count2="SELECT COUNT(table_name) FROM v_catalog.all_tables WHERE schema_name='%s'" condition="table_name" condition2="schema_name"/>
-        </search_table>
-        <search_column>
-            <inband query="SELECT table_schema,table_name FROM v_catalog.columns WHERE %s" condition="column_name" condition2="table_schema" condition3="table_name"/>
-            <blind query="SELECT DISTINCT(table_schema) FROM v_catalog.columns WHERE %s ORDER BY 1" query2="SELECT DISTINCT(table_name) FROM v_catalog.columns WHERE table_schema='%s'" count="SELECT COUNT(DISTINCT(table_schema)) FROM v_catalog.columns WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM v_catalog.columns WHERE table_schema='%s'" condition="column_name" condition2="table_schema" condition3="table_name"/>
-        </search_column>
-    </dbms>
 
-    <dbms value="Mckoi">
-        <!-- NOTE: DBMS with minimalistic set of (restricted) features -->
-        <cast query="CONCAT('',%s)"/>
-        <length query="LENGTH(%s)"/>
-        <isnull query="IF(%s IS NULL,' ', %s)"/>
-        <delimiter query="||"/>
-        <limit/>
-        <limitregexp/>
-        <limitgroupstart/>
-        <limitgroupstop/>
-        <limitstring/>
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- XML 文件声明，指定版本为 1.0，编码为 UTF-8 -->
+
+<root>
+    <!-- 根元素，包含所有数据库相关的查询模板 -->
+
+    <dbms value="MySQL">
+        <!-- 定义 MySQL 数据库管理系统相关的查询模板 -->
+
+        <!-- 将字段转换为 NCHAR 类型 -->
+        <cast query="CAST(%s AS NCHAR)"/>
+        
+        <!-- 获取字段的字符长度 -->
+        <length query="CHAR_LENGTH(%s)"/>
+        
+        <!-- 判断字段是否为 NULL，如果是则返回空格 -->
+        <isnull query="IFNULL(%s,' ')"/>
+        
+        <!-- 定义字段分隔符为逗号 -->
+        <delimiter query=","/>
+        
+        <!-- 定义 LIMIT 子句，用于分页查询 -->
+        <limit query="LIMIT %d,%d"/>
+        
+        <!-- 正则表达式匹配 LIMIT 子句，支持两种格式：LIMIT d,d 和 LIMIT d -->
+        <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+        
+        <!-- 定义 LIMIT 子句中起始位置的分组索引 -->
+        <limitgroupstart query="1"/>
+        
+        <!-- 定义 LIMIT 子句中结束位置的分组索引 -->
+        <limitgroupstop query="2"/>
+        
+        <!-- 定义 LIMIT 子句的字符串表示 -->
+        <limitstring query=" LIMIT "/>
+        
+        <!-- 定义 ORDER BY 子句，按指定字段升序排序 -->
         <order query="ORDER BY %s ASC"/>
+        
+        <!-- 计算字段的行数 -->
         <count query="COUNT(%s)"/>
-        <comment query=";"/>
-        <substring query="SUBSTRING((%s),%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (IF(%s,1,0))"/>
-        <!-- NOTE: other way around does not work -->
-        <inference query="'%c'&lt;SUBSTRING((%s),%d,1)"/>
-        <banner/>
-        <current_user/>
-        <current_db/>
-        <hostname/>
-        <table_comment/>
-        <column_comment/>
-        <is_dba/>
-        <dbs/>
-        <tables/>
-        <dump_table>
-            <inband query="SELECT %s FROM %s"/>
-            <blind query="SELECT MIN(%s) FROM %s WHERE CONCAT('',%s)>'%s'" query2="SELECT MAX(%s) FROM %s WHERE CONCAT('',%s) LIKE '%s'" count="SELECT COUNT(*) FROM %s" count2="SELECT COUNT(DISTINCT(%s)) FROM %s"/>
-        </dump_table>
-        <users/>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <search_db/>
-        <search_table/>
-        <search_column/>
-   </dbms>
+        
+        <!-- 定义 SQL 注释的三种形式：-- -、/* 和 # -->
+        <comment query="-- -" query2="/*" query3="#"/>
+        
+        <!-- 获取字段的子字符串 -->
+        <substring query="MID((%s),%d,%d)"/>
+        
+        <!-- 连接两个字符串 -->
+        <concatenate query="CONCAT(%s,%s)"/>
+        
+        <!-- 使用 CASE 语句进行条件判断 -->
+        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
+        
+        <!-- 将字段转换为十六进制表示 -->
+        <hex query="HEX(%s)"/>
+        
+        <!-- 推断字段中某个字符的 ASCII 码是否大于指定值 -->
+        <inference query="ORD(MID((%s),%d,1))>%d"/>
+        
+        <!-- 获取数据库版本信息 -->
+        <banner query="VERSION()"/>
+        
+        <!-- 获取当前用户 -->
+        <current_user query="CURRENT_USER()"/>
+        
+        <!-- 获取当前数据库名称 -->
+        <current_db query="DATABASE()"/>
+        
+        <!-- 获取数据库服务器的主机名 -->
+        <hostname query="@@HOSTNAME"/>
+        
+        <!-- 获取指定表的注释信息 -->
+        <table_comment query="SELECT table_comment FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' AND table_name='%s'"/>
+        
+        <!-- 获取指定列的注释信息 -->
+        <column_comment query="SELECT column_comment FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s' AND table_name='%s' AND column_name='%s'"/>
+        
+        <!-- 检查当前用户是否具有 DBA 权限 -->
+        <is_dba query="(SELECT super_priv FROM mysql.user WHERE user='%s' LIMIT 0,1)='Y'"/>
+        
+        <!-- 检查是否存在指定的用户定义函数 (UDF) -->
+        <check_udf query="(SELECT name FROM mysql.func WHERE name='%s' LIMIT 0,1)='%s'"/>
+        
+        <!-- 用户相关的查询模板 -->
+        <users>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="SELECT user FROM mysql.user" query3="SELECT username FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+            
+            <!-- 盲注查询，获取指定位置的用户信息 -->
+            <blind query="SELECT DISTINCT(grantee) FROM INFORMATION_SCHEMA.USER_PRIVILEGES LIMIT %d,1" query2="SELECT DISTINCT(user) FROM mysql.user LIMIT %d,1" query3="SELECT DISTINCT(username) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS LIMIT %d,1" count="SELECT COUNT(DISTINCT(grantee)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES" count2="SELECT COUNT(DISTINCT(user)) FROM mysql.user" count3="SELECT COUNT(DISTINCT(username)) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+        </users>
+        
+        <!-- 密码相关的查询模板 -->
+        <passwords>
+            <!-- 获取所有用户的用户名和密码哈希 -->
+            <inband query="SELECT user,authentication_string FROM mysql.user" condition="user"/>
+            
+            <!-- 盲注查询，获取指定用户的密码哈希 -->
+            <blind query="SELECT DISTINCT(authentication_string) FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(authentication_string)) FROM mysql.user WHERE user='%s'"/>
+        </passwords>
+        
+        <!-- 权限相关的查询模板 -->
+        <privileges>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="SELECT user,select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user" condition2="user"/>
+            
+            <!-- 盲注查询，获取指定用户的权限信息 -->
+            <blind query="SELECT DISTINCT(privilege_type) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s' LIMIT %d,1" query2="SELECT select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(privilege_type)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s'" count2="SELECT COUNT(*) FROM mysql.user WHERE user='%s'"/>
+        </privileges>
 
-    <dbms value="Presto">
-        <cast query="CAST(%s AS VARCHAR(4000))"/>
-        <length query="LENGTH(%s)"/>
-        <isnull query="COALESCE(%s,' ')"/>
-        <delimiter query="||"/>
-        <limit query="OFFSET %d LIMIT %d"/>
-        <limitregexp query="\s+OFFSET\s+([\d]+)\s+LIMIT\s+([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- XML 文件声明，指定版本为 1.0，编码为 UTF-8 -->
+
+<root>
+    <!-- 根元素，包含所有数据库相关的查询模板 -->
+
+    <dbms value="MySQL">
+        <!-- 定义 MySQL 数据库管理系统相关的查询模板 -->
+
+        <!-- 将字段转换为 NCHAR 类型 -->
+        <cast query="CAST(%s AS NCHAR)"/>
+        
+        <!-- 获取字段的字符长度 -->
+        <length query="CHAR_LENGTH(%s)"/>
+        
+        <!-- 判断字段是否为 NULL，如果是则返回空格 -->
+        <isnull query="IFNULL(%s,' ')"/>
+        
+        <!-- 定义字段分隔符为逗号 -->
+        <delimiter query=","/>
+        
+        <!-- 定义 LIMIT 子句，用于分页查询 -->
+        <limit query="LIMIT %d,%d"/>
+        
+        <!-- 正则表达式匹配 LIMIT 子句，支持两种格式：LIMIT d,d 和 LIMIT d -->
+        <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+        
+        <!-- 定义 LIMIT 子句中起始位置的分组索引 -->
         <limitgroupstart query="1"/>
+        
+        <!-- 定义 LIMIT 子句中结束位置的分组索引 -->
         <limitgroupstop query="2"/>
-        <limitstring query=" OFFSET "/>
+        
+        <!-- 定义 LIMIT 子句的字符串表示 -->
+        <limitstring query=" LIMIT "/>
+        
+        <!-- 定义 ORDER BY 子句，按指定字段升序排序 -->
         <order query="ORDER BY %s ASC"/>
+        
+        <!-- 计算字段的行数 -->
         <count query="COUNT(%s)"/>
-        <comment query="--"/>
-        <substring query="SUBSTR(%s,%d,%d)"/>
-        <concatenate query="%s||%s"/>
-        <case query="SELECT (CASE WHEN (%s) THEN '1' ELSE '0' END)"/>
-        <hex query="TO_HEX(%s)"/>
-        <inference query="CODEPOINT(SUBSTR((%s),%d,1))>%d" dbms_version="&gt;=0.178" query2="SUBSTR((%s),%d,1)>'%c'"/>/>
-        <banner/>
-        <current_user query="CURRENT_USER"/>
-        <current_db/>
-        <hostname/>
+        
+        <!-- 定义 SQL 注释的三种形式：-- -、/* 和 # -->
+        <comment query="-- -" query2="/*" query3="#"/>
+        
+        <!-- 获取字段的子字符串 -->
+        <substring query="MID((%s),%d,%d)"/>
+        
+        <!-- 连接两个字符串 -->
+        <concatenate query="CONCAT(%s,%s)"/>
+        
+        <!-- 使用 CASE 语句进行条件判断 -->
+        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
+        
+        <!-- 将字段转换为十六进制表示 -->
+        <hex query="HEX(%s)"/>
+        
+        <!-- 推断字段中某个字符的 ASCII 码是否大于指定值 -->
+        <inference query="ORD(MID((%s),%d,1))>%d"/>
+        
+        <!-- 获取数据库版本信息 -->
+        <banner query="VERSION()"/>
+        
+        <!-- 获取当前用户 -->
+        <current_user query="CURRENT_USER()"/>
+        
+        <!-- 获取当前数据库名称 -->
+        <current_db query="DATABASE()"/>
+        
+        <!-- 获取数据库服务器的主机名 -->
+        <hostname query="@@HOSTNAME"/>
+        
+        <!-- 获取指定表的注释信息 -->
         <table_comment query="SELECT table_comment FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' AND table_name='%s'"/>
+        
+        <!-- 获取指定列的注释信息 -->
         <column_comment query="SELECT column_comment FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s' AND table_name='%s' AND column_name='%s'"/>
-        <is_dba/>
-        <check_udf/>
-        <users/>
-        <passwords/>
-        <privileges/>
-        <roles/>
-        <statements/>
-        <dbs>
-            <inband query="SELECT schema_name FROM INFORMATION_SCHEMA.SCHEMATA"/>
-            <blind query="SELECT DISTINCT(schema_name) FROM INFORMATION_SCHEMA.SCHEMATA ORDER BY 1 OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(schema_name)) FROM INFORMATION_SCHEMA.SCHEMATA"/>
-        </dbs>
-        <tables>
-            <inband query="SELECT table_schema,table_name FROM INFORMATION_SCHEMA.TABLES" condition="table_schema"/>
-            <blind query="SELECT table_name FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' OFFSET %d LIMIT 1" count="SELECT COUNT(table_name) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s'"/>
-        </tables>
-        <columns>
-            <inband query="SELECT column_name,data_type FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND table_schema='%s'" condition="column_name"/>
-            <blind query="SELECT column_name FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND table_schema='%s'" query2="SELECT data_type FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND column_name='%s' AND table_schema='%s'" count="SELECT COUNT(column_name) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND table_schema='%s'" condition="column_name"/>
-        </columns>
-        <dump_table>
-            <inband query="SELECT %s FROM %s.%s ORDER BY %s"/>
-            <blind query="SELECT %s FROM %s.%s ORDER BY %s OFFSET %d LIMIT 1" count="SELECT COUNT(*) FROM %s.%s"/>
-        </dump_table>
-        <search_db>
-            <inband query="SELECT schema_name FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" condition="schema_name"/>
-            <blind query="SELECT DISTINCT(schema_name) FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" count="SELECT COUNT(DISTINCT(schema_name)) FROM INFORMATION_SCHEMA.SCHEMATA WHERE %s" condition="schema_name"/>
-        </search_db>
-        <search_table>
-            <inband query="SELECT table_schema,table_name FROM INFORMATION_SCHEMA.TABLES WHERE %s" condition="table_name" condition2="table_schema"/>
-            <blind query="SELECT DISTINCT(table_schema) FROM INFORMATION_SCHEMA.TABLES WHERE %s" query2="SELECT DISTINCT(table_name) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s'" count="SELECT COUNT(DISTINCT(table_schema)) FROM INFORMATION_SCHEMA.TABLES WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s'" condition="table_name" condition2="table_schema"/>
-        </search_table>
+        
+        <!-- 检查当前用户是否具有 DBA 权限 -->
+        <is_dba query="(SELECT super_priv FROM mysql.user WHERE user='%s' LIMIT 0,1)='Y'"/>
+        
+        <!-- 检查是否存在指定的用户定义函数 (UDF) -->
+        <check_udf query="(SELECT name FROM mysql.func WHERE name='%s' LIMIT 0,1)='%s'"/>
+        
+        <!-- 用户相关的查询模板 -->
+        <users>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="SELECT user FROM mysql.user" query3="SELECT username FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+            
+            <!-- 盲注查询，获取指定位置的用户信息 -->
+            <blind query="SELECT DISTINCT(grantee) FROM INFORMATION_SCHEMA.USER_PRIVILEGES LIMIT %d,1" query2="SELECT DISTINCT(user) FROM mysql.user LIMIT %d,1" query3="SELECT DISTINCT(username) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS LIMIT %d,1" count="SELECT COUNT(DISTINCT(grantee)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES" count2="SELECT COUNT(DISTINCT(user)) FROM mysql.user" count3="SELECT COUNT(DISTINCT(username)) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+        </users>
+        
+        <!-- 密码相关的查询模板 -->
+        <passwords>
+            <!-- 获取所有用户的用户名和密码哈希 -->
+            <inband query="SELECT user,authentication_string FROM mysql.user" condition="user"/>
+            
+            <!-- 盲注查询，获取指定用户的密码哈希 -->
+            <blind query="SELECT DISTINCT(authentication_string) FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(authentication_string)) FROM mysql.user WHERE user='%s'"/>
+        </passwords>
+        
+        <!-- 权限相关的查询模板 -->
+        <privileges>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="SELECT user,select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user" condition2="user"/>
+            
+            <!-- 盲注查询，获取指定用户的权限信息 -->
+            <blind query="SELECT DISTINCT(privilege_type) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s' LIMIT %d,1" query2="SELECT select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(privilege_type)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s'" count2="SELECT COUNT(*) FROM mysql.user WHERE user='%s'"/>
+        </privileges>
+
         <search_column>
             <inband query="SELECT table_schema,table_name FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" condition="column_name" condition2="table_schema" condition3="table_name"/>
             <blind query="SELECT DISTINCT(table_schema) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" query2="SELECT DISTINCT(table_name) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s'" count="SELECT COUNT(DISTINCT(table_schema)) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s'" condition="column_name" condition2="table_schema" condition3="table_name"/>
@@ -1586,6 +1077,117 @@
             <blind query="SELECT DISTINCT(table_schema) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" query2="SELECT DISTINCT(table_name) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s'" count="SELECT COUNT(DISTINCT(table_schema)) FROM INFORMATION_SCHEMA.COLUMNS WHERE %s" count2="SELECT COUNT(DISTINCT(table_name)) FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s'" condition="column_name" condition2="table_schema" condition3="table_name"/>
         </search_column>
     </dbms>
+    <?xml version="1.0" encoding="UTF-8"?>
+<!-- XML 文件声明，指定版本为 1.0，编码为 UTF-8 -->
+
+<root>
+    <!-- 根元素，包含所有数据库相关的查询模板 -->
+
+    <dbms value="MySQL">
+        <!-- 定义 MySQL 数据库管理系统相关的查询模板 -->
+
+        <!-- 将字段转换为 NCHAR 类型 -->
+        <cast query="CAST(%s AS NCHAR)"/>
+        
+        <!-- 获取字段的字符长度 -->
+        <length query="CHAR_LENGTH(%s)"/>
+        
+        <!-- 判断字段是否为 NULL，如果是则返回空格 -->
+        <isnull query="IFNULL(%s,' ')"/>
+        
+        <!-- 定义字段分隔符为逗号 -->
+        <delimiter query=","/>
+        
+        <!-- 定义 LIMIT 子句，用于分页查询 -->
+        <limit query="LIMIT %d,%d"/>
+        
+        <!-- 正则表达式匹配 LIMIT 子句，支持两种格式：LIMIT d,d 和 LIMIT d -->
+        <limitregexp query="\s+LIMIT\s+([\d]+)\s*\,\s*([\d]+)" query2="\s+LIMIT\s+([\d]+)"/>
+        
+        <!-- 定义 LIMIT 子句中起始位置的分组索引 -->
+        <limitgroupstart query="1"/>
+        
+        <!-- 定义 LIMIT 子句中结束位置的分组索引 -->
+        <limitgroupstop query="2"/>
+        
+        <!-- 定义 LIMIT 子句的字符串表示 -->
+        <limitstring query=" LIMIT "/>
+        
+        <!-- 定义 ORDER BY 子句，按指定字段升序排序 -->
+        <order query="ORDER BY %s ASC"/>
+        
+        <!-- 计算字段的行数 -->
+        <count query="COUNT(%s)"/>
+        
+        <!-- 定义 SQL 注释的三种形式：-- -、/* 和 # -->
+        <comment query="-- -" query2="/*" query3="#"/>
+        
+        <!-- 获取字段的子字符串 -->
+        <substring query="MID((%s),%d,%d)"/>
+        
+        <!-- 连接两个字符串 -->
+        <concatenate query="CONCAT(%s,%s)"/>
+        
+        <!-- 使用 CASE 语句进行条件判断 -->
+        <case query="SELECT (CASE WHEN (%s) THEN 1 ELSE 0 END)"/>
+        
+        <!-- 将字段转换为十六进制表示 -->
+        <hex query="HEX(%s)"/>
+        
+        <!-- 推断字段中某个字符的 ASCII 码是否大于指定值 -->
+        <inference query="ORD(MID((%s),%d,1))>%d"/>
+        
+        <!-- 获取数据库版本信息 -->
+        <banner query="VERSION()"/>
+        
+        <!-- 获取当前用户 -->
+        <current_user query="CURRENT_USER()"/>
+        
+        <!-- 获取当前数据库名称 -->
+        <current_db query="DATABASE()"/>
+        
+        <!-- 获取数据库服务器的主机名 -->
+        <hostname query="@@HOSTNAME"/>
+        
+        <!-- 获取指定表的注释信息 -->
+        <table_comment query="SELECT table_comment FROM INFORMATION_SCHEMA.TABLES WHERE table_schema='%s' AND table_name='%s'"/>
+        
+        <!-- 获取指定列的注释信息 -->
+        <column_comment query="SELECT column_comment FROM INFORMATION_SCHEMA.COLUMNS WHERE table_schema='%s' AND table_name='%s' AND column_name='%s'"/>
+        
+        <!-- 检查当前用户是否具有 DBA 权限 -->
+        <is_dba query="(SELECT super_priv FROM mysql.user WHERE user='%s' LIMIT 0,1)='Y'"/>
+        
+        <!-- 检查是否存在指定的用户定义函数 (UDF) -->
+        <check_udf query="(SELECT name FROM mysql.func WHERE name='%s' LIMIT 0,1)='%s'"/>
+        
+        <!-- 用户相关的查询模板 -->
+        <users>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="SELECT user FROM mysql.user" query3="SELECT username FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+            
+            <!-- 盲注查询，获取指定位置的用户信息 -->
+            <blind query="SELECT DISTINCT(grantee) FROM INFORMATION_SCHEMA.USER_PRIVILEGES LIMIT %d,1" query2="SELECT DISTINCT(user) FROM mysql.user LIMIT %d,1" query3="SELECT DISTINCT(username) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS LIMIT %d,1" count="SELECT COUNT(DISTINCT(grantee)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES" count2="SELECT COUNT(DISTINCT(user)) FROM mysql.user" count3="SELECT COUNT(DISTINCT(username)) FROM DATA_DICTIONARY.CUMULATIVE_USER_STATS"/>
+        </users>
+        
+        <!-- 密码相关的查询模板 -->
+        <passwords>
+            <!-- 获取所有用户的用户名和密码哈希 -->
+            <inband query="SELECT user,authentication_string FROM mysql.user" condition="user"/>
+            
+            <!-- 盲注查询，获取指定用户的密码哈希 -->
+            <blind query="SELECT DISTINCT(authentication_string) FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(authentication_string)) FROM mysql.user WHERE user='%s'"/>
+        </passwords>
+        
+        <!-- 权限相关的查询模板 -->
+        <privileges>
+            <!-- 获取所有用户的权限信息 -->
+            <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="SELECT user,select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user" condition2="user"/>
+            
+            <!-- 盲注查询，获取指定用户的权限信息 -->
+            <blind query="SELECT DISTINCT(privilege_type) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s' LIMIT %d,1" query2="SELECT select_priv,insert_priv,update_priv,delete_priv,create_priv,drop_priv,reload_priv,shutdown_priv,process_priv,file_priv,grant_priv,references_priv,index_priv,alter_priv,show_db_priv,super_priv,create_tmp_table_priv,lock_tables_priv,execute_priv,repl_slave_priv,repl_client_priv,create_view_priv,show_view_priv,create_routine_priv,alter_routine_priv,create_user_priv FROM mysql.user WHERE user='%s' LIMIT %d,1" count="SELECT COUNT(DISTINCT(privilege_type)) FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE grantee %s '%s'" count2="SELECT COUNT(*) FROM mysql.user WHERE user='%s'"/>
+        </privileges>
+
 
     <dbms value="eXtremeDB">
         <cast query="CAST(%s AS VARCHAR(4000))"/>