摘要: //Part1// this code has a really nasty security flawvoid LogUserName(SqlConnection conn, string userName) { string sqlText = "insert user_names values('" + userName + "')"; SqlCommand cmd = new SqlCom... 阅读全文
posted @ 2009-05-20 10:16 SmartFramework@live.jp 阅读(130) 评论(0) 推荐(0) 编辑