摘要
详细阐述了SQL注入攻击的原理和常见实施手段,认真分析并总结了现有常见防范方法的特点以及存在的不足之处,进一步提出了利用对用户输入数据进行Base64编码来防范SQL注入的新方法,并对该方法做了实验性的测试,得到了比较理想的结果。
At first,the article expounds the theory of SQL injection and the harm it may cause to system security in detail,then analyzes the existing solutions to prevent it clearly and summarizes the deficiency those solutions have, and in succession, presents a new practical protection mechanism against SQL injection attacks by using Base64-data-encoding, finally two examples are shown to test the new method and the results are exhibited.
出处
《电脑知识与技术》
2006年第1期121-122,共2页
Computer Knowledge and Technology
