SQL 21:10:02 read 1029 comments 0 font size: large and small subscriptions
STR () function in SQL
Declare @ number smallintSet @ number = 2Select cast (replace (STR (@ number, 3), '', '0') as char (3 ))
STR function [String]Function
Returns
Talking about PHP security and anti-SQL injection, prevent XSS attack, anti-theft chain, anti-CSRF
Objective:
First of all, the author is not a web security experts, so this is not a Web security expert-level article, but learning notes, careful
This article summarizes almost all possible PHP anti-SQL Injection code.
Determine the XP_CMDSHELL executable status
WEB virtual directory discovered
Upload ASP, php, and jsp Trojans;
Obtain the Administrator permission;
// PHP full-site
Determine xp_cmdshell performance
Discovery Web Virtual Directory
Upload asp,php,jsp Trojan;
Get administrator privileges;
PHP Whole station Anti-injection program, need to require_once the document in the public fileJudge the state of
Common String functions for MySQLOrganize yourself from official documents.1.1 SUBSTR or SUBSTRINGSUBSTR (Str,pos), SUBSTR (str from POS), SUBSTR (Str,pos,len), SUBSTR (str fromPOS for Len)SUBSTR () is a synonym for SUBSTRING ().SUBSTRING
The 1 str () function is used to convert numeric type data to non-character types.2 str () function syntaxSelect str (expression of numeric type [, total expression length] [, Number of digits after decimal point])The total length of the expression
Php filters html strings to prevent SQL injection of instance code. Php filters html strings to prevent SQL injection. it uses functions to process the strings to be written to the database to filter illegal information and malicious html code! Code:
PHP Filters HTML strings, prevents SQL injection, and uses functions to filter out illegal information, as well as malicious HTML code, by using a string that will be written to the database.
Code:
PHP Batch filter Post,get sensitive dataif
Error:Cdbcommand failed to execute the SQL statement:sqlstate[hy000]: General error:1300 Invalid UTF8 character string: ' \xbf\ XA5 'Workaround:$currentPrice = $currentPrice * 1; = = $currentPrice A number that was originally a string, resulting
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.