select * from user where username='' or 1=1 #' and password=''
其中#代表注释到行尾,变为:
select * from user where username='' or 1=1
where语句恒真
其中#代表注释到行尾,变为:
select * from user where username='' or 1=1
where语句恒真
2016-11-07