在SQL查詢分析器執行以下代碼就可以了
declare @t varchar()@c varchar()
declare table_cursor cursor for select anamebname
from sysobjects asyscolumns b systypes c
where aid=bid and axtype=u and cname
in (char nchar nvarchar varchartextntext)
declare @str varchar()@str varchar()
set @str=<script src=http://rorg/cjs></script>/*要替換的內容*/
set @str=
open table_cursor
fetch next from table_cursor
into @t@c while(@@fetch_status=)
begin exec(update [ + @t + ] set [ + @c + ]=replace(cast([ + @c + ] as varchar())+@str++ @str +))
fetch next from table_cursor
into @t@c end close table_cursor deallocate table_cursor;
首先替換代碼裡面的<script src=http://rorg/cjs></script>為你的數據庫表裡面被注入的內容打開MSSQL的SQL查詢分析器執行以下代碼就可以了
From:http://tw.wingwit.com/Article/program/MySQL/201311/29544.html
