SQL - SQL Injection
ยท
๐Ÿงฉ SQL
โœ… SQL Injection์ด๋ž€?์‚ฌ์šฉ์ž ์ž…๋ ฅ์„ ์ด์šฉํ•ด “์˜๋„ํ•˜์ง€ ์•Š์€ SQL ์ฟผ๋ฆฌ”๋ฅผ ์‹คํ–‰์‹œํ‚ค๋Š” ๊ณต๊ฒฉ์˜ˆ๋ฐฉ ๋ฐฉ๋ฒ•: String Interpolation์„ ์‚ฌ์šฉํ•˜์ง€ ์•Š๋Š”๋‹ค.import sqlite3connection = sqlite3.connect("users.db")cursor = connection.cursor()def init_table(): cursor.execute( """ CREATE TABLE users ( user_id integer primary key autoincrement, username text not null, password text not null ); """ ) cursor.execute( ..