10. SQL 注入

select * from users where `user_id` = '1' --' and `user_password`='11111'
select * from users where `user_id` = '';drop table users; --'
select * from student where age < 42 and `id` like '10%' or 1=1   //  or 1=1 相当于 不管左边是什么条件，都为真

public function actionTest3()
    {
        $student = (new \yii\db\Query())->select('*')
                             ->from('student')
                             ->where('name=:name', [':name' => 'bbb'])
                             ->one();
        var_dump($student);
    }