首页->网络安全知识问答

多选题 :  某网站登录验证逻辑：从数据库查询对应用户名和密码，存在返回值即验证通过。以下数据库SQL注入语句符合登录成功逻辑且一定成功的是：()

（A）SELECT * FROM user WHERE username = ' 1' OR '1' = '1' AND password = ''

（B）SELECT * FROM user WHERE username = '1' OR '1' = '1' # ' AND password = ''

（C）SELECT * FROM user WHERE username = '1' OR '1' = '1' AND password = '1' OR '1' = '1'

（D）SELECT * FROM user WHERE username = '1' AND password = '' OR '1' = '1'

（E）SELECT * FROM user WHERE username = '1' AND password = '1' #