有一个问题一直困扰了我很久
似乎有一种编码在sql查询中不会被过滤，比如%29诸如此类，今天才知道，从w3cschool贴篇文。
URL Encoding Reference
| ASCII Character |
URL-encoding |
| space |
%20 |
| ! |
%21 |
| “ |
%22 |
| # |
%23 |
| $ |
%24 |
| % |
%25 |
| & |
%26 |
| ‘ |
%27 |
| ( |
%28 |
| ) |
%29 |
| * |
%2A |
| + |
%2B |
| , |
%2C |
| – |
%2D |
| . |
%2E |
| / |
%2F |
| 0 |
%30 |
| 1 |
%31 |
| 2 |
%32 |
| 3 |
%33 |
| 4 |
%34 |
| 5 |
%35 |
| 6 |
%36 |
| 7 |
%37 |
| 8 |
%38 |
| 9 |
%39 |
| : |
%3A |
| ; |
%3B |
| < |
%3C |
| = |
%3D |
| > |
%3E |
| ? |
%3F |
| @ |
%40 |
| A |
%41 |
| B |
%42 |
| C |
%43 |
| D |
%44 |
| E |
%45 |
| F |
%46 |
| G |
%47 |
| H |
%48 |
| I |
%49 |
| J |
%4A |
| K |
%4B |
| L |
%4C |
| M |
%4D |
| N |
%4E |
| O |
%4F |
| P |
%50 |
| Q |
%51 |
| R |
%52 |
| S |
%53 |
| T |
%54 |
| U |
%55 |
| V |
%56 |
| W |
%57 |
| X |
%58 |
| Y |
%59 |
| Z |
%5A |
| [ |
%5B |
|
%5C |
| ] |
%5D |
| ^ |
%5E |
| _ |
%5F |
| ` |
%60 |
| a |
%61 |
| b |
%62 |
| c |
%63 |
| d |
%64 |
| e |
%65 |
| f |
%66 |
| g |
%67 |
| h |
%68 |
| i |
%69 |
| j |
%6A |
| k |
%6B |
| l |
%6C |
| m |
%6D |
| n |
%6E |
| o |
%6F |
| p |
%70 |
| q |
%71 |
| r |
%72 |
| s |
%73 |
| t |
%74 |
| u |
%75 |
| v |
%76 |
| w |
%77 |
| x |
%78 |
| y |
%79 |
| z |
%7A |
| { |
%7B |
| | |
%7C |
| } |
%7D |
| ~ |
%7E |
|
%7F |
| Ä |
%80 |
|
%81 |
| Ç |
%82 |
| É |
%83 |
| Ñ |
%84 |
| Ö |
%85 |
| Ü |
%86 |
| á |
%87 |
| à |
%88 |
| â |
%89 |
| ä |
%8A |
| ã |
%8B |
| å |
%8C |
|
%8D |
| é |
%8E |
|
%8F |
|
%90 |
| ë |
%91 |
| í |
%92 |
| ì |
%93 |
| î |
%94 |
| ï |
%95 |
| ñ |
%96 |
| ó |
%97 |
| ò |
%98 |
| ô |
%99 |
| ö |
%9A |
| õ |
%9B |
| ú |
%9C |
|
%9D |
| û |
%9E |
| ü |
%9F |
|
%A0 |
| ° |
%A1 |
| ¢ |
%A2 |
| £ |
%A3 |
|
%A4 |
| • |
%A5 |
| | |
%A6 |
| ß |
%A7 |
| ® |
%A8 |
| © |
%A9 |
| ™ |
%AA |
| ´ |
%AB |
| ¨ |
%AC |
| Ø |
%AD |
| Æ |
%AE |
| Ø |
%AF |
| ∞ |
%B0 |
| ± |
%B1 |
| ≤ |
%B2 |
| ≥ |
%B3 |
| ¥ |
%B4 |
| µ |
%B5 |
| ∂ |
%B6 |
| ∑ |
%B7 |
| ∏ |
%B8 |
| π |
%B9 |
| ∫ |
%BA |
| ª |
%BB |
| º |
%BC |
| Ω |
%BD |
| æ |
%BE |
| ø |
%BF |
| ¿ |
%C0 |
| ¡ |
%C1 |
| ¬ |
%C2 |
| √ |
%C3 |
| ƒ |
%C4 |
| ≈ |
%C5 |
| ∆ |
%C6 |
| « |
%C7 |
| » |
%C8 |
| … |
%C9 |
|
%CA |
| À |
%CB |
| Ã |
%CC |
| Õ |
%CD |
| Π|
%CE |
| œ |
%CF |
| – |
%D0 |
| — |
%D1 |
| “ |
%D2 |
| ” |
%D3 |
| ‘ |
%D4 |
| ’ |
%D5 |
| ÷ |
%D6 |
|
%D7 |
| ÿ |
%D8 |
| Ÿ |
%D9 |
| ⁄ |
%DA |
| € |
%DB |
| ‹ |
%DC |
| › |
%DD |
| fi |
%DE |
| fl |
%DF |
| ‡ |
%E0 |
| · |
%E1 |
| ‚ |
%E2 |
| „ |
%E3 |
| ‰ |
%E4 |
| Â |
%E5 |
| Ê |
%E6 |
| Á |
%E7 |
| Ë |
%E8 |
| È |
%E9 |
| Í |
%EA |
| Î |
%EB |
| Ï |
%EC |
| Ì |
%ED |
| Ó |
%EE |
| Ô |
%EF |
| |
%F0 |
| Ò |
%F1 |
| Ú |
%F2 |
| Û |
%F3 |
| Ù |
%F4 |
| ı |
%F5 |
| ˆ |
%F6 |
| ˜ |
%F7 |
| ¯ |
%F8 |
| ˘ |
%F9 |
| ˙ |
%FA |
| ˚ |
%FB |
| ¸ |
%FC |
| ˝ |
%FD |
| ˛ |
%FE |
| ˇ |
%FF |
URL Encoding Reference
The ASCII device control characters %00-%1f were originally designed to control hardware devices. Control characters have nothing to do inside a URL.
| ASCII Character |
Description |
URL-encoding |
| NUL |
null character |
%00 |
| SOH |
start of header |
%01 |
| STX |
start of text |
%02 |
| ETX |
end of text |
%03 |
| EOT |
end of transmission |
%04 |
| ENQ |
enquiry |
%05 |
| ACK |
acknowledge |
%06 |
| BEL |
bell (ring) |
%07 |
| BS |
backspace |
%08 |
| HT |
horizontal tab |
%09 |
| LF |
line feed |
%0A |
| VT |
vertical tab |
%0B |
| FF |
form feed |
%0C |
| CR |
carriage return |
%0D |
| SO |
shift out |
%0E |
| SI |
shift in |
%0F |
| DLE |
data link escape |
%10 |
| DC1 |
device control 1 |
%11 |
| DC2 |
device control 2 |
%12 |
| DC3 |
device control 3 |
%13 |
| DC4 |
device control 4 |
%14 |
| NAK |
negative acknowledge |
%15 |
| SYN |
synchronize |
%16 |
| ETB |
end transmission block |
%17 |
| CAN |
cancel |
%18 |
| EM |
end of medium |
%19 |
| SUB |
substitute |
%1A |
| ESC |
escape |
%1B |
| FS |
file separator |
%1C |
| GS |
group separator |
%1D |
| RS |
record separator |
%1E |
| US |
unit separator |
%1 |
Math Symbols Supported by HTML
| Character |
Entity Number |
Entity Name |
Description |
| ∀ |
∀ |
∀ |
for all |
| ∂ |
∂ |
∂ |
part |
| ∃ |
∃ |
∃ |
exists |
| ∅ |
∅ |
∅ |
empty |
| ∇ |
∇ |
∇ |
nabla |
| ∈ |
∈ |
∈ |
isin |
| ∉ |
∉ |
∉ |
notin |
| ∋ |
∋ |
∋ |
ni |
| ∏ |
∏ |
∏ |
prod |
| ∑ |
∑ |
∑ |
sum |
| − |
− |
− |
minus |
| ∗ |
∗ |
∗ |
lowast |
| √ |
√ |
√ |
square root |
| ∝ |
∝ |
∝ |
proportional to |
| ∞ |
∞ |
∞ |
infinity |
| ∠ |
∠ |
∠ |
angle |
| ∧ |
∧ |
∧ |
and |
| ∨ |
∨ |
∨ |
or |
| ∩ |
∩ |
∩ |
cap |
| ∪ |
∪ |
∪ |
cup |
| ∫ |
∫ |
∫ |
integral |
| ∴ |
∴ |
∴ |
therefore |
| ∼ |
∼ |
∼ |
similar to |
| ≅ |
≅ |
≅ |
congruent to |
| ≈ |
≈ |
≈ |
almost equal |
| ≠ |
≠ |
≠ |
not equal |
| ≡ |
≡ |
≡ |
equivalent |
| ≤ |
≤ |
≤ |
less or equal |
| ≥ |
≥ |
≥ |
greater or equal |
| ⊂ |
⊂ |
⊂ |
subset of |
| ⊃ |
⊃ |
⊃ |
superset of |
| ⊄ |
⊄ |
⊄ |
not subset of |
| ⊆ |
⊆ |
⊆ |
subset or equal |
| ⊇ |
⊇ |
⊇ |
superset or equal |
| ⊕ |
⊕ |
⊕ |
circled plus |
| ⊗ |
⊗ |
⊗ |
circled times |
| ⊥ |
⊥ |
⊥ |
perpendicular |
| ⋅ |
⋅ |
⋅ |
dot operator |
Greek Letters Supported by HTML
| Character |
Entity Number |
Entity Name |
Description |
| Α |
Α |
Α |
Alpha |
| Β |
Β |
Β |
Beta |
| Γ |
Γ |
Γ |
Gamma |
| Δ |
Δ |
Δ |
Delta |
| Ε |
Ε |
Ε |
Epsilon |
| Ζ |
Ζ |
Ζ |
Zeta |
| Η |
Η |
Η |
Eta |
| Θ |
Θ |
Θ |
Theta |
| Ι |
Ι |
Ι |
Iota |
| Κ |
Κ |
Κ |
Kappa |
| Λ |
Λ |
Λ |
Lambda |
| Μ |
Μ |
Μ |
Mu |
| Ν |
Ν |
Ν |
Nu |
| Ξ |
Ξ |
Ξ |
Xi |
| Ο |
Ο |
Ο |
Omicron |
| Π |
Π |
Π |
Pi |
| Ρ |
Ρ |
Ρ |
Rho |
|
undefined |
|
Sigmaf |
| Σ |
Σ |
Σ |
Sigma |
| Τ |
Τ |
Τ |
Tau |
| Υ |
Υ |
Υ |
Upsilon |
| Φ |
Φ |
Φ |
Phi |
| Χ |
Χ |
Χ |
Chi |
| Ψ |
Ψ |
Ψ |
Psi |
| Ω |
Ω |
Ω |
Omega |
|
|
|
|
| α |
α |
α |
alpha |
| β |
β |
β |
beta |
| γ |
γ |
γ |
gamma |
| δ |
δ |
δ |
delta |
| ε |
ε |
ε |
epsilon |
| ζ |
ζ |
ζ |
zeta |
| η |
η |
η |
eta |
| θ |
θ |
θ |
theta |
| ι |
ι |
ι |
iota |
| κ |
κ |
κ |
kappa |
| λ |
λ |
λ |
lambda |
| μ |
μ |
μ |
mu |
| ν |
ν |
ν |
nu |
| ξ |
ξ |
ξ |
xi |
| ο |
ο |
ο |
omicron |
| π |
π |
π |
pi |
| ρ |
ρ |
ρ |
rho |
| ς |
ς |
ς |
sigmaf |
| σ |
σ |
σ |
sigma |
| τ |
τ |
τ |
tau |
| υ |
υ |
υ |
upsilon |
| φ |
φ |
φ |
phi |
| χ |
χ |
χ |
chi |
| ψ |
ψ |
ψ |
psi |
| ω |
ω |
ω |
omega |
|
|
|
|
| ϑ |
ϑ |
ϑ |
theta symbol |
| ϒ |
ϒ |
ϒ |
upsilon symbol |
| ϖ |
ϖ |
ϖ |
pi symbol |
Other Entities Supported by HTML
| Character |
Entity Number |
Entity Name |
Description |
| Π|
Π|
Π|
capital ligature OE |
| œ |
œ |
œ |
small ligature oe |
| Š |
Š |
Š |
capital S with caron |
| š |
š |
š |
small S with caron |
| Ÿ |
Ÿ |
Ÿ |
capital Y with diaeres |
| ƒ |
ƒ |
ƒ |
f with hook |
| ˆ |
ˆ |
ˆ |
modifier letter circumflex accent |
| ˜ |
˜ |
˜ |
small tilde |
|
|
  |
en space |
|
|
  |
em space |
|
|
  |
thin space |
| |
|
‌ |
zero width non-joiner |
| |
|
‍ |
zero width joiner |
| |
|
‎ |
left-to-right mark |
| |
|
‏ |
right-to-left mark |
| – |
– |
– |
en dash |
| — |
— |
— |
em dash |
| ‘ |
‘ |
‘ |
left single quotation mark |
| ’ |
’ |
’ |
right single quotation mark |
| ‚ |
‚ |
‚ |
single low-9 quotation mark |
| “ |
“ |
“ |
left double quotation mark |
| ” |
” |
” |
right double quotation mark |
| „ |
„ |
„ |
double low-9 quotation mark |
| † |
† |
† |
dagger |
| ‡ |
‡ |
‡ |
double dagger |
| • |
• |
• |
bullet |
| … |
… |
… |
horizontal ellipsis |
| ‰ |
‰ |
‰ |
per mille |
| ′ |
′ |
′ |
minutes |
| ″ |
″ |
″ |
seconds |
| ‹ |
‹ |
‹ |
single left angle quotation |
| › |
› |
› |
single right angle quotation |
| ‾ |
‾ |
‾ |
overline |
| € |
€ |
€ |
euro |
| ™ |
™ or ™ |
™ |
trademark |
| ← |
← |
← |
left arrow |
| ↑ |
↑ |
↑ |
up arrow |
| → |
→ |
→ |
right arrow |
| ↓ |
↓ |
↓ |
down arrow |
| ↔ |
↔ |
↔ |
left right arrow |
| ↵ |
↵ |
↵ |
carriage return arrow |
| ⌈ |
⌈ |
⌈ |
left ceiling |
| ⌉ |
⌉ |
⌉ |
right ceiling |
| ⌊ |
⌊ |
⌊ |
left floor |
| ⌋ |
⌋ |
⌋ |
right floor |
| ◊ |
◊ |
◊ |
lozenge |
| ♠ |
♠ |
♠ |
spade |
| ♣ |
♣ |
♣ |
club |
| ♥ |
♥ |
♥ |
heart |
| ♦ |
♦ |
♦ |
diamond |