sql注入測試用例

1 刪除表：Select * from A where A.a = ‘testdata’; drop table A---’;

2 獲取所有記錄：

Select * from A where A.a = ‘testdata’ OR ‘1’=’1’;

3 不輸入密碼：

Select * from user A where A.username =  ‘username’--’ and A.password = ‘’;

4 使用半個單引號、分號

Update table A set A.a = ‘testdata’;--’

 

查詢重復名稱

select InnerCode from tbInfoEmployee where EmpName in(select EmpName from tbInfoEmployee group by EmpName having COUNT(empName)>1)