Search injection for an important business of doodle

I just clicked on the page and didn't see the search box. I will try search injection, which can be injected decisively. Search injection 1. Manual test 2. sqlmap test.


Recharge platform, injection is very dangerous, money matters, repair as soon as possibleSolution:

This injection can be seen that the Java web of doodle still uses the concatenated SQL and statement query methods. It is recommended that programmers use preparedstatement for pre-compilation in the future to prevent most SQL injections and recharge platforms, injection is dangerous, and money can be fixed as soon as possible.