sql注入

http://aljcn.cnblogs.com/archive/2006/06/14/425772.html

http://www.cnblogs.com/xmq120/archive/2005/05/16/156126.aspx