防止sql注入

sqlmap 较专业的sql注入工具



YII2  activeform   注意传过来的modle的rules规则
<?php
$form=\yii\widgets\ActiveForm::begin(['action'=>\yii\helpers\Url::to(['news/testadd'])]);
echo $form->field($model, 'title')->textInput(['class'=>'test1']);
echo $form->field($model,'content')->textarea();

echo \yii\helpers\Html::submitButton();
$form->end();
?>