防止sql注入

sqlmap 较专业的sql注入工具



YII2  activeform   注意传过来的modle的rules规则
<?php
$form=yiiwidgetsActiveForm::begin(['action'=>yiihelpersUrl::to(['news/testadd'])]);
echo $form->field($model, 'title')->textInput(['class'=>'test1']);
echo $form->field($model,'content')->textarea();

echo yiihelpersHtml::submitButton();
$form->end();
?>