node防范sql注入
node防范sql注入// 写法1:字符串拼接 util.format
const sql util.format(SELECT * FROM someTable WHERE id %s and name %s, req.params.id, req.params.name);
connection.query(sql, function (err, results) {})// 写法2:占位符 ? 参数数组&…
2026/9/24 1:24:58