eg1:
预期
username:doug
password:p@ssord
select count(*)
from users
where username='doug' and password ='p@ssord'
恶意
username:‘ or 1=1 - -
password:
select count(*)
from users
where username=' ' or 1=1 - - and password ='p@ssord'
eg1:
预期
username:doug
password:p@ssord
select count(*)
from users
where username='doug' and password ='p@ssord'
恶意
username:‘ or 1=1 - -
password:
select count(*)
from users
where username=' ' or 1=1 - - and password ='p@ssord'
本文标题:sql注入
本文链接:https://www.haomeiwen.com/subject/adqygrtx.html
网友评论