The SQL injection defense policy of the cloud Lock Site is completely bypass #1

The SQL injection defense policy of the cloud Lock Site is completely bypass #1

Yundun SQL Injection defense policy full bypass #1

Payload: http ://**.**.**.**/? Id =/* 'Union select 1, 2 from users % 23 */For details about the process, refer to my dongle's http ://**. **. **. **/bugs/wooyun-2015-0163141 effect: completely ignore the SQL Injection policy using the statement: http ://**. **. **. **/? Id =/* 'xxxxxxxxxx % 23 */any intermediate xxx injection, can be completely bypass

The latest version of the cloud lock is downloaded locally, and the SQL Injection Protection is enabled.

Test

Bypass

Solution:
Too many rules are difficult to maintain, making it more error-prone, simple and straightforward