问题详情

string sql =”select*from item where account=’”+acc ount+”’and sku=’”+sku”’”;ResultSet rs =stmt.execute(query); 上述代码不存在SQL注入漏洞。判断对错