https://blog.csdn.net/zuke123456zh-cnhttps://blog.csdn.net/https://blog.csdn.net/zuke123456/article/details/29844983https://blog.csdn.net/zuke123456/article/details/29844983zuke123456Tue, 10 Jun 2014 15:13:55 +0800https://blog.csdn.net/zuke123456/article/details/23296867https://blog.csdn.net/zuke123456/article/details/23296867zuke123456Wed, 09 Apr 2014 20:51:09 +0800https://blog.csdn.net/zuke123456/article/details/8930493https://blog.csdn.net/zuke123456/article/details/8930493zuke123456Wed, 15 May 2013 14:51:55 +0800https://blog.csdn.net/zuke123456/article/details/8591301https://blog.csdn.net/zuke123456/article/details/8591301zuke123456Tue, 19 Feb 2013 15:25:56 +0800https://blog.csdn.net/zuke123456/article/details/8476516https://blog.csdn.net/zuke123456/article/details/8476516zuke123456Mon, 07 Jan 2013 13:18:32 +0800https://blog.csdn.net/zuke123456/article/details/8231121https://blog.csdn.net/zuke123456/article/details/8231121zuke123456Tue, 27 Nov 2012 17:41:42 +0800https://blog.csdn.net/zuke123456/article/details/8213532https://blog.csdn.net/zuke123456/article/details/8213532zuke123456Thu, 22 Nov 2012 17:45:59 +0800https://blog.csdn.net/zuke123456/article/details/8212257https://blog.csdn.net/zuke123456/article/details/8212257zuke123456Thu, 22 Nov 2012 14:35:03 +0800https://blog.csdn.net/zuke123456/article/details/8208325https://blog.csdn.net/zuke123456/article/details/8208325zuke123456Wed, 21 Nov 2012 15:33:07 +0800https://blog.csdn.net/zuke123456/article/details/8208222https://blog.csdn.net/zuke123456/article/details/8208222zuke123456Wed, 21 Nov 2012 15:23:53 +0800https://blog.csdn.net/zuke123456/article/details/8208256https://blog.csdn.net/zuke123456/article/details/8208256zuke123456Wed, 21 Nov 2012 15:23:32 +0800https://blog.csdn.net/zuke123456/article/details/7818331https://blog.csdn.net/zuke123456/article/details/7818331zuke123456Wed, 01 Aug 2012 14:28:30 +0800https://blog.csdn.net/zuke123456/article/details/7213214https://blog.csdn.net/zuke123456/article/details/7213214zuke123456Sat, 21 Jan 2012 12:15:56 +0800https://blog.csdn.net/zuke123456/article/details/6785545https://blog.csdn.net/zuke123456/article/details/6785545zuke123456Sat, 17 Sep 2011 18:16:12 +0800https://blog.csdn.net/zuke123456/article/details/6114592https://blog.csdn.net/zuke123456/article/details/6114592zuke123456Tue, 04 Jan 2011 00:27:00 +0800全站文章系统采用FSO静态生成的HTML文件来显示。这样做的好处一来可以减轻服务器负担，提高访问速度。二来也阻止了SQL注入式的攻击。。 

　　我来说说他们的文章系统原理：全部文章均在数据库存有一个副本。另处根据模板生成一个HTML页面。 

　　攻击方法： 

　　查看源文件/看里面是否有通过JS来调用的页面。 

　　如调用来更新文章的浏览次数。 

　　我们就可以这样来试一下可否注入： <]]>https://blog.csdn.net/zuke123456/article/details/6097923https://blog.csdn.net/zuke123456/article/details/6097923zuke123456Sat, 25 Dec 2010 15:26:00 +0800　　if salary < 1000 then
　　http://www.baidu.com/s?bs=zuozhuan&wd=%D7%F3%D7%AC
前者的XML元素直接使用了小于号“<”，后者使用了和号“&”，这样的XML会产生解析错误。为避免此类错误，专业说法是用这些特殊字符的实体引用来代替。
正确的写法，小于号“<”]]>https://blog.csdn.net/zuke123456/article/details/5659217https://blog.csdn.net/zuke123456/article/details/5659217zuke123456Wed, 09 Jun 2010 18:20:00 +0800前提：
     网上《配置 SQL Server 2005 远程调试存储过程》的文章确实很多，但按照网上写的没有成功，找了好久最终成功可以调试存储过程啦！按照晚上写的一步步执行。我添加最后一步。
 
先按照：http://blog.csdn.net/daigua245/archive/2009/03/17/3999338.aspx
 
     END:进入 控制面板 - 管理工具 - 本地安全设置 - 选择本地策略 - 安全设置 - 在列表中]]>https://blog.csdn.net/zuke123456/article/details/4960247https://blog.csdn.net/zuke123456/article/details/4960247zuke123456Mon, 07 Dec 2009 23:32:00 +0800https://blog.csdn.net/zuke123456/article/details/4953603https://blog.csdn.net/zuke123456/article/details/4953603zuke123456Sun, 06 Dec 2009 23:16:00 +0800https://blog.csdn.net/zuke123456/article/details/2613731https://blog.csdn.net/zuke123456/article/details/2613731zuke123456Sat, 05 Jul 2008 11:59:00 +0800