用Python簡單處理SQL語句繞過防注入

1,

#!/usr/bin/python

# -*- coding: utf-8 -*-

def sqlencode(sql,do):

    if(do == "+"):

        sqlend = sql.replace(" ","+")#"+".join(sql)

    elif(do == "*"):

        sqlend = sql.replace(" ","/**/")#"/**/".join(sql)

    elif(do == "%09"):

        sqlend = sql.replace(" ","%09")#"%09".join(sql)

    else:

        print "you got a wrong choice!"

    return sqlend

co = "Code Made By Hackfreer version 1"

useage = "Encode method:+,*,%09"

print co.center(50)

print useage.center(50)

tipLine1 = raw_input("Please enter your sql str:")

tipLine2 = raw_input("Please enter your encode methods:")

print sqlencode(str1,str2)

可以實作空格的幾種轉化

2,

# -*- coding= utf-8 -*-

import string

def encodeSql(str):

        result = ""

        for i in range(0,len(str)):

                temp = str[i]

                if(i % 2 == 0):

                        sqlTemp = temp.upper()

                        result += sqlTemp

                else:

                        result += temp

                i += 1

        return result 

str = raw_input("Please input your sqlcode:")

print encodeSql(str)

可以實作對SQL語句的随機大小寫轉換

本文轉sinojelly51CTO部落格，原文連結：http://blog.51cto.com/pnig0s1992/390600，如需轉載請自行聯系原作者