基于Web服务的数据库注入攻击与防范

Database Injection Attack and Defense Based on Web Server

介绍了SQL注入攻击的发生原理和完全控制服务器的快捷方法及对Web服务器带来极大的危害,给出了相应的SQL执行脚本和对应的防范攻击措施,以供开发Web程序和架设服务器时参考.

The occurrence principles of the attack about SQL pouring into Web server are introduced,the quick method of contolling the server completely is described,thus the bringing enormous harms for the Web server are also described,corresponding SQL to carry out the script is given,the corresponding measures to guard against this kind of attack are also given. It is a reference for developing the Web procedure as well as erecting the server.