轉義

時間 2021-01-15

原文原文鏈接

1：case 1.1：sql注入 <form url="./" method = 'post'> sql注入:<input name ="escape"> <input type="submit"> </form> //php $deleteSql = "DELETE FROM article where title = '".$_POST['escape']."'";