sql注入：

select   *  from t_user where name = "aa" and password = "bbb"  or  1 = 1;