http://thinkinmylife.iteye.com/blog/358475 sql注入学习:http://netsecurity.51cto.com/art/201108/287651.htm