什么符号会导致sql注入
lewis
2018-11-24
25次阅读
会导致sql注入的符号有：
"'", "<", ">", "%", "\"", ",", ".", ">=", "=<", "<>", "-", "_", ";", "||", "[", "]", "&", "/", "-", "|", " "
还有其他会导致sql注入的标签以及关键字，例如：
//标签：<applet>
<body>
<embed>
<frame>
<script>
<frameset>
<html>
<iframe>
<img>
<style>
<layer>
<link>
<ilayer>
<meta>
<object>
//关键字：
select, update, insert, delete, declare, @, exec, dbcc, alter, drop, create, backup, if, else, end, and, or, add, set, open, close, use, begin, retun, as, go, exists
发表评论:
◎欢迎参与讨论，请在这里发表您的看法、交流您的观点。