摘要： sprintf https://www.php.net/manual/zh/function.sprintf.php 漏洞demo： <?php $name = addslashes($_GET['a']); $sql = "select * from '{$name}' where %d"; ec 阅读全文