The primary form of SQL injection consists of direct insertion of code into user-input variables that are concatenated with SQL commands and executed.

• SQL注入的主要形式包括直接将代码插入到与SQL命令串联在一起并使其得以执行的用户输入变量。