1．关于Openrowset和Opendatasource 可能这个技巧早有人已经会了，就是利用openrowset发送本地命令。通常我们的用法是（包括MSDN的列子）如下： select

ID=1 and (Select top 1 name from(Select top [N] id,name from sysobjects where xtype=char(85)) T order by id desc)1[T] = 表名

://127.0.0.1/xx?id=11 and exists (select * from admin) 检测字段的 http://127.0.0.1/xx?id=11 and exists

%20union%20select%201,1,l_conte nt,1,1,1%20from%20dv_log%20where%20l_id=5%20union%20select%2 01,1,1,1,1,1%20from%20dv_bbs1然后网络上出现了暴出全部日志

预防字段空值的处理 SELECT DEPTNO ,DEPTNAME ,COALESCE(MGRNO ,''ABSENT''),ADMRDEPT FROM DEPARTMENT

日期、时间及时间戳记，请参考适当的 DB2 寄存器：SELECT current date FROM sysibm.sysdummy1SELECT current time FROM sysibm

用如下的SQL语句也可以生成第i页,每页n行，tid是主键列，select top n * from tab where strWhere and tid(select max(tid) fro

=oConn.Execute("SELECT * FROM Books") while not oRs.Eof strSQL = "SELECT * FROM Authors WHERE AuthorID="oRs("AuthorID") oRs2=oConn.Execu

：select sum(sl0000) from xstfxps2 wheredhao00 in (select dhao00 from xstfxps1 where trunc(ywrq00)=tru

大家讨论讨论。SELECT NVL(A.USERRATE, 1) AS USERRATEFROM(SELECT USERRATE , 1 AS TTT