What is SQL injection? My understanding of SQL injection is that some people can use malicious parameters input, let the background execute this SQL, and then achieve the purpose of obtaining data or destroying the database! For a simple query example, background SQL is stitched: SELECT * from Test where name= ' + parameter pass + '; The front page asks for name, so the hacker can enter: ';D ROP TABLE test;-- Do not underestimate this section of SQL code: SELECT * from Test where name= ';D rop table test;--'; In SQL is correct, executable, but after execution the entire Test table is deleted, the website crashes! The best solution is to not write the stitching SQL, instead of using parameterized SQL, recommend new projects to use. Here do not introduce, interested friends can self-search, this article describes the method suitable for the old project, is not the use of parameterized SQL development program.
1. ASP. NET Filter class Sqlfilter to prevent SQL injection
Summary: This article shares an anti-SQL injection filtering class Sqlfilter, which prevents the injection of post, get, and cookies.
2. Good-looking characters PHP character filter class for filtering data entered by various types of users
Description: Good-looking characters: good-looking characters PHP character filter class, used to filter the data of various types of user input: The detailed code is as follows: The copy code code is as follows: <?php abstract class Filter {//filter parent class private $b Lackstr = Array (); Private $whitestr = Array (); function Filtit ($str) {//do something}} class Loginfilter extends
3. PHP character filter class, used to filter various types of user input data _php tutorial
Introduction: PHP Character filtering class for filtering data entered by various types of users. The detailed code is as follows: Copy the code as follows:? PHP abstract class Filter {//filter parent class private $blackstr = Array (); Private $whitestr = arr Ay (); function Filtit ($STR) {
4. PHP Form Sensitive character filter class, PHP form filter _php Tutorial
Introduction: PHP Form sensitive character filter class, PHP form filtering. PHP Form Sensitive character filter class, PHP form Filter This article describes the php form sensitive character filter class and its usage. Share to everyone for your reference. The specific analysis is as follows: Copy code
5. php File Upload Filter class
Introduction: PHP File Download filtering class <?php/** * File Download class * Create time:06/23/2009 * author:daker. W * qq:451021477 */class download{private $debug = false;private
6. PHP Form Insurance Considerations, submit data filtering
Introduction: PHP Form security considerations, submit data filter PHP to form the special characters of the filter and processing http://www.bestlovesky.com/read.php?1002?php form Submission Program Security http:/ wenku.baidu.com/view/73b54729647d27284b73513a.htmlphp Form Validation Filter class http://w
7. Htmlpurifier Why does this kind of library have such a large capacity
Introduction: Htmlpurifier This class library why the capacity of such a large RT, himself wrote a station, their own rich text editor, Rich text filter really do not want to write their own, online to find this class library, The result is the capacity of 1.03MB frightened, I 3 stations are not so big Standard Edition inside have 354 files, should not all use? What files will be used in particular? There is no other useful text filter library?------Solutions---------------------
8. PHP character filtering class for filtering data entered by various types of users
Introduction: PHP Character filtering class for filtering data entered by various types of users. The detailed code is as follows: Copy the code as follows:? PHP abstract class Filter {//filter parent class private $blackstr = Array (); Private $whitestr = arr Ay (); function Filtit ($STR) {
9. PHP Form Validation Filter class
Introduction: PHP Form security considerations, submit data filter PHP to form the special characters of the filter and processing http://www.bestlovesky.com/read.php?1002?php form Submission Program Security http:/ wenku.baidu.com/view/73b54729647d27284b73513a.htmlphp Form Validation Filter class Http://www.zzare
PHP File Upload Filter class
Introduction: PHP File Download filtering class <?php/** * File Download class * Create time:06/23/2009 * author:daker. W * qq:451021477 */class download{private $debug = false;private $ERRORMSG