入门教程：SQL InjectionTest语法实例与登录表操作详解

CREATE TABLE [dbo].[Login](
[Id] [int] IDENTITY(1,1) NOT NULL,
[UserName] [nvarchar](20) NOT NULL,
[Password] [nvarchar](50) NOT NULL,
 CONSTRAINT [PK_Login] PRIMARY KEY CLUSTERED 
(
[Id] ASC
)WITH (PAD_INDEX  = OFF, STATISTICS_NORECOMPUTE  = OFF, IGNORE_DUP_KEY = OFF, ALLOW_ROW_LOCKS  = ON, ALLOW_PAGE_LOCKS  = ON) ON [PRIMARY]
) ON [PRIMARY]
GO
ALTER TABLE [dbo].[Login] ADD  CONSTRAINT [IX_UserName] UNIQUE NONCLUSTERED 
(
[UserName] ASC
)WITH (PAD_INDEX  = OFF, STATISTICS_NORECOMPUTE  = OFF, SORT_IN_TEMPDB = OFF, IGNORE_DUP_KEY = OFF, ONLINE = OFF, ALLOW_ROW_LOCKS  = ON, ALLOW_PAGE_LOCKS  = ON) ON [PRIMARY]
GO
INSERT INTO Login VALUES('admin','123456');
INSERT INTO Login VALUES('admin%','123456');
INSERT INTO Login VALUES('admin_','123456');
INSERT INTO Login VALUES('admin[','123456');
INSERT INTO Login VALUES('admin]','123456');
INSERT INTO Login VALUES('admin-','123456');
GO


Create PROCEDURE [dbo].[PROC_Login](
@userName nvarchar(10),
@password varchar(20),
@count int OUTPUT
)
AS