CTF web总结--sql注入

<?php include "common.php"; if (isset($_POST["name"])){ $name = str_replace("'", "", trim($_POST["name"])); if (strlen($name) > 10){ echo("<script>alert('too long')</script>"); }else{ $sql = "select c

>>阅读原文<<