摘要
SQL注入是Web系统中经常存在的一种漏洞,攻击者利用这种漏洞可以通过SQL语句直接访问数据库,从而对系统的安全造成了很大的隐患。该文通过大量的实例介绍了SQL注入攻击方法及防范这种攻击的措施。
Cross-site scripting is a vulnerability that is usually found in Web application. By means of it,the attacker can access database with SQL command directly,so it threats to system security in great degree. The attack method and prevention measure of SQL injection attacks are illustrated by many examples in this paper.
出处
《电脑知识与技术(过刊)》
2009年第10X期8119-8120,8122,共3页
Computer Knowledge and Technology
关键词
SQL注入
B/S模式
数据库
漏洞
SQL inject
Browser/Server model
database
vulnerability