python--防止SQL注入

最新推荐文章于 2024-05-23 16:17:43 发布

weixin_30502157

最新推荐文章于 2024-05-23 16:17:43 发布

阅读量129

点赞数

文章标签： python 数据库

原文链接：http://www.cnblogs.com/f-rt/p/11144591.html

版权

from pymysql import *


def main():
    # 创建Connextion连接
    conn = connect(host='localhost', port=3306, user='root', password='', database='test', charset='utf8')
    # 获取Cursor对象
    cursor = conn.cursor()
    param = "' or 1 = 1 or '1"
    sql = "select * from users where username = '%s'" % (param,)
    count = cursor.execute(sql)
    print(count)
    # 结果是2 获取到数据库所有记录
    print(cursor.fetchall())
    # ((1, '张三', '男', 10), (2, '李四', '男', 10))
    count1 = cursor.execute("select * from users where username = %s", param)
    print(count1)
    # 结果是0



if __name__ == '__main__':
    main()

转载于:https://www.cnblogs.com/f-rt/p/11144591.html