sql注入测试用例

1 删除表：Select * from A where A.a = ‘testdata’; drop table A---’;

2 获取所有记录：

Select * from A where A.a = ‘testdata’ OR ‘1’=’1’;

3 不输入密码：

Select * from user A where A.username =  ‘username’--’ and A.password = ‘’;

4 使用半个单引号、分号

Update table A set A.a = ‘testdata’;--’

转载于:https://www.cnblogs.com/caojuansh/p/9697864.html