SQL注入理论

Question

$sql = "SELECT name FROM users WHERE name='".$name. "' AND password='".$password. "'"; 

Answer 1

假设我们有这两个输入变量：

$name = "iam";
$password = "aninjection";

其结果是以下查询：

$sql = "SELECT name FROM users WHERE name='iam' AND password='aninjection'"; 

假设现在我们将其添加到$password变量中：

$password = "aninjection' OR 1='1";

$sql = "SELECT name FROM users WHERE name='iam' AND password='aninjection' OR 1='1'";