qq_43095204的博客

原创 sql注入截掉单引号'是不是就无解了哪位大神有办法的指点指点

sql注入截掉单引号'是不是就无解了 id=replace(trim(request("id")),"'","") Set rs=GrateRs("Select * from ab where a like '"&id&"'",3) if rs.bof and rs.eof then rs.close set rs=nothing end if ...