Community Learn Tools Library Leisure
search
English
Home > Backend Development > PHP Tutorial > body text

PHP能用sprintf函数来防止SQL注入吗？

WBOY
Release： 2016-06-23 14:03:22
Original
1389 people have browsed it

$sql = sprintf("select count(*) as qty from t_user where f_uid='%s' and f_password='%s'",$password,$userAccount);
Copy after login

这句话能挡住SQL注入吗？


回复讨论(解决方案)

不能，SQL注入的关键在于引号，而sprintf()不会去处理引号。

Related labels：
PHP能用sprintf函数来防止SQL注入吗？
source：php.cn
Previous article：问一下大伙，dedecms数据库连接文件怎么配置呀 Next article：检测按钮所在行
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
function_exists() cannot determine the custom function Function test () {return true;} if (function_exists ('test')) {echo "test is function...
From 2024-04-29 11:01:01
0
2
1960
How to display the mobile version of Google Chrome Hello teacher, how can I change Google Chrome into a mobile version?
From 2024-04-23 00:22:19
0
10
2121
The child window operates the parent window, but the output does not respond. The first two sentences are executable, but the last sentence cannot be implemented.
From 2024-04-19 15:37:47
0
1
1789
There is no output in the parent window document.onclick = function(){ window.opener.document.write('I am the output of the child ...
From 2024-04-18 23:52:34
0
1
1689
Where is the courseware about CSS mind mapping? Courseware
From 2024-04-16 10:10:18
0
0
1697
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template