黑客X档案官方论坛's Archiver

lanhulove 发表于 2008-4-23 10:37

关于idHTTP.Get的问题

代码:
procedure TForm1.Button1Click(Sender: TObject);
begin
  Memo1.Text := idHTTP1.Get(Edit1.Text+'%20and%201=1') ;
  Memo2.Text := idHTTP1.Get(Edit1.Text+'%20and%201=2') ;
end;
//Edit1.Text为可注入的url
Memo1.Text := idHTTP1.Get(Edit1.Text+'%20and%201=1') ;
没报错。and 1=1
Memo3.Text := idHTTP1.Get(Edit1.Text+'%20and%201=2') ;
报错。   and 1=2
什么原因?

页: [1]


Powered by Discuz! 6.1.0  © 2001-2007 Comsenz Inc.