select * from user where username='' or 1=1 #' and password=''
其中#代表注釋到行尾,變為:
select * from user where username='' or 1=1
where語句恒真
其中#代表注釋到行尾,變為:
select * from user where username='' or 1=1
where語句恒真
2016-11-07