CSRF 攻击https://www.cnblogs.com/lovesong/p/5233195.htmlweb 越权操作https://blog.csdn.net/tanzhen1991910/article/details/53220593SQL注入攻击 https://www.2cto.com/article/201310/250877.html