create database P8
use P8
create table login
(
Username varchar(20),
Password varchar(20),
constraint pklogin primary key (Username)
)
insert into login values('2011240105','MDP')
insert into login values('2011240169','MDP123')
select *from login
select *from login where Username ='2011240105' and Password ='MDP'
====================================================================
(SQL Injection)
select *from login where Username ='2011240105'--'
select *from login where Username =''or''=''