昨天看一个名目代码，文献没有多，不外 每一个文献外皆N多注进，一个一个看其实 太乏，索性花了点空儿，搞了个邪则抒发式，搜刮 没去，然后再将平安 的筛选进来。省了没有长空儿的说。  一.查找select、update、delete语句 ((select|SELECT|update|UPDATE|delete|DELETE) .*(from|FROM|set|SET) .*(where|WHERE) .*) 查询语句,对付 出有前提 断定 的根本 没有存留注进答题，果而仅搜刮 此语句便可 例子： select * from user where  二.单纯的数字型注进 ((select|SELECT|update|UPDATE|delete|DELETE) .*(from|FROM|set|SET) .*(where|WHERE) .*=[ ]必修["]必修["]必修\$) 能找到select、update delete三种语句， 五种格局 的零形注进，如： 间接变质传进 select * from guess where id=$subject_id update guess set is_valid=0 where id=$subject_id delete from guess where id=$subject_id =取变质之间存留空格 select * from guess where id= $subject_id update guess set is_valid=0 where id= $subject_id delete from guess where id= $subject_id 变质单引号 select * from guess where id="$subject_id" update guess set is_valid=0 where id="$subject_id" delete from guess where id="$subject_id" =取单引号之间存留空格 select * from guess where id= "$subject_id" update guess set is_valid=0 where id= "$subject_id" delete from guess where id= "$subject_id" =取引号、单引号之间存留空格 select * from guess where id= "大众$subject_id" update guess set is_valid=0 where id= "大众$subject_id" delete from guess where id= "大众$subject_id"