尝试检查是否有用户输入

# 示例代码：使用参数化查询防止SQL注入
import sqlite3

conn = sqlite3.connect('example.db')
cursor = conn.cursor()

user_input = "example' OR '1'='1"
query = "SELECT * FROM users WHERE username = ?"
cursor.execute(query, (user_input,))
results = cursor.fetchall()

// 示例代码：防止XSS攻击
function escapeHtml(unsafe) {
    return unsafe
        .replace(/&/g, "&")
        .replace(/</g, "&lt;")
        .replace(/>/g, "&gt;")
        .replace(/"/g, "&quot;")
        .replace(/'/g, "&#039;");
}

let userInput = "<script>alert('XSS');</script>";
let safeInput = escapeHtml(userInput);
document.getElementById("output").innerHTML = safeInput;

# 示例代码：验证用户输入
import re

def validate_email(email):
    pattern = r'^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+$'
    return re.match(pattern, email) is not None

user_input = "example@example.com"
if validate_email(user_input):
    print("Valid email")
else:
    print("Invalid email")