When working with strings, extra care needs to be taken to avoid SQL Injection; ... SELECT * FROM users WHERE name IN ('jinzhu','jinzhu 2');
確定! 回上一頁