sql 注入代码例子 --mysql --

index.html

    
    





    
    




    name: 
	 password: 

    

 

welcome.php

 

';

$result = mysqli_query($conn, $sql);

if (mysqli_num_rows($result) > 0) {
    echo 'get succ ' . '
';
    // 输出数据
    while($row = mysqli_fetch_assoc($result)) {
        echo "id: " . $row["id"]. " - Name: " . $row["username"]. " ;password " . $row["password"]. "
";
    }
} else {
    echo "0 结果";
}

mysqli_close($conn);


?>

 

 

sql

INSERT INTO `user` VALUES (1, 'admin', 'admin');
INSERT INTO `user` VALUES (2, 'aaa', 'bbb');
INSERT INTO `user` VALUES (3, 'ccc', 'ddd');