PHP 注射风格测试

# 标题写的不太好,原意在写一个程序好比说注射机的时候，方便测试。
# 代码有点冗长。

$id = $_GET['id'];

$server_name = "DB_SERver";

$username = "DBuser";

$password = "DBuser_Pass";

$database = "Select_DB";

$db = new mysqli($server_name, $username, $password,$database);

$query = "select * from admin where id=$id";

$result=$db->query($query);

if($num_results = $result->num_rows){

$row = $result->fetch_assoc();

foreach($row as $key=>$value){

echo $key.":=:";

echo $value;

echo '<br />';

}

<html>

<head>

<title>SQL InJection Test</title>

<body>

<pre>

这里是空的怎么~ 飞了~ 难道

</pre>

</body>

</html>

posted @ 2008-05-12 11:34 090 阅读(490) 评论(1) 收藏举报

刷新页面返回顶部

吃酒的和尚