char query[100];
char* name = "username";
char* pass = "password";
sprintf_s(query,sizeof(query),"%s%s%s%s%s","select * from account where name = \"",name,"\" and password = \"",pass,"\";");
Visual Studio 2012得用sprintf_s,sprintf会报错。
本文介绍在Visual Studio 2012中如何使用sprintf_s进行安全的字符串格式化操作,避免使用易引发安全问题的sprintf函数,并提供了一个具体的SQL字符串拼接示例。
char query[100];
char* name = "username";
char* pass = "password";
sprintf_s(query,sizeof(query),"%s%s%s%s%s","select * from account where name = \"",name,"\" and password = \"",pass,"\";");
Visual Studio 2012得用sprintf_s,sprintf会报错。
1454
3969

被折叠的 条评论
为什么被折叠?