MySQL数据库（六） —— SQL注入攻击、视图、事物、存储过程、流程控制

Molet Tomcat 2023-02-27 1017浏览 0

一、SQL注入攻击

1、什么是SQL注入攻击

import  pymysql

conn = pymysql.Connect(
    user="root",
    password="admin",
    host="localhost",
    database="day43",
    charset="utf8"
)

cursor = conn.cursor(pymysql.cursors.DictCursor)

sql = "select *from user where user = '%s' and pwd = '%s';" % (input("input userName"),input("input password"))

conut=cursor.execute(sql)

print(count)
if count:
    print("login success")
else:
    print("login error")

cursor.close()
conn.close()