The basic idea behind a SQL injection attack is this: you create a Web page that allows the user to enter text into a textbox that will be used to execute a query against a database.
SQL Injection攻击的基本原理如下：您创建一个网页，允许用户向文本框中输入文本，用于对数据库执行查询。
In the New Web Query dialog box enter the URL for the Web page from which you want to get data.
在新建Web查询对话框中输入想从中得到数据的We b页的URL地址。
Search engine looks very simple: users enter a query keywords, the search engine in accordance with key words to the database to find, and return to the WEB page of the most suitable connection.
搜索引擎看起来很简单：用户输入一个查询关键词，搜索引擎就按照关键词语到数据库去查找，并返回最合适的WE B页连接。
应用推荐