当前位置:百科知识 > 知到红刀子出答案

问题描述:

[多选] 下面哪个代码是不安全的,可能存在sqI注入漏洞?
A.<select id="selectStudentByName" parameterClass="String" resultClass="Student"> select name,birth,score from tbl_student where name like "%$name$%" </select> B.stmt = connection、prepareStatement("select * from articles where uid=?"); stmt、setlnt(1,id);rs = stmt、executeQuery0; C.stmt = connection、prepareStatement("select * from articles where title like "%" + keyword + "%" order by id"); rs = stmt、executeQuery0; D.<select id="selectStudentByld" parameterClass="int" resultClass="Student"> select * from tbl_student where id=#id# </select>
参考答案:查看
答案解析:
☆收藏

随机题目