具体分析了基于Web技术的开放性应用软件PHP中SQL语句最易受到的注入式攻击的具体表现形式,通过具体实例说明攻击方式及其原理,并指出了详细的解决方案和防范措施,使PHP+SQL设计的与平台无关的Web应用程序的安全性得以加强,使用户更好的将HTML和ActiveX的强大功能应用于PHP应用程序。 This paper analyzes the concrete manifestations of the most vulnerable injection attacks of SQL statements in PHP, an open application software based on Web technology. By means of concrete examples, it shows the attack methods and their principles, and points out the solutions and preventive measures to make PHP + SQL designed platform-agnostic web applications to be more secure, allowing users to better leverage the power of HTML and ActiveX for PHP applications.