comments, shares, uploads, likes我每次都会出错
ActiveRecord::StatementInvalid: Mysql2::Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL serverversion for the right syntax to use near 'DROP TABLE IF EXISTS _by_
你好,我正在用node.js和mysql开发服务器。当我阅读一些关于mysql库的文档时,我发现打开多语句选项会增加SQL注入攻击的范围。例如,
let sql = "UPDATE auth_user SET last_login=now() WHERE username=?如果有人给了“foo”;DROP TABLE auth_user;--“username params进行SQL