当前,黑客针对网站的攻击越发猖獗,造成了重大的经济损失。在这些攻击中,SQL注入攻击是黑客最常用手段之一。据统计,国内网站使用ASP+Access或SQL Server的占70%以上, PHP+MySQL占20%,其他的不足10%。由于SQL的广泛使用,以及web程序、web服务器和数据库服务器等的一些常见的漏洞,导致了SQL注入的普遍性与巨大危害性。因此,研究SQL注入攻击及其应对方案对保障网站安全具有重要意义。 At present, hackers are increasingly rampant attacks on the Web site, causing significant economic losses. Among these attacks, SQL injection attacks are one of the most common hacking methods. According to statistics, domestic websites use ASP + Access or SQL Server account for more than 70%, PHP + MySQL accounts for 20%, other less than 10%. The widespread use of SQL, as well as some common vulnerabilities such as web applications, web servers, and database servers, have led to the widespread and immense danger of SQL injection. Therefore, it is very important to study the SQL injection attack and its countermeasures to guarantee the website security.