1.新闻列表

2.新闻列表，绕过空格

String sql="select * from users"; if(orderby!=null&&orderby.length()>0){ orderby=orderby.toLowerCase(); if(orderby.indexOf("and")!=-1||orderby.indexOf("or")!=-1||orderby.indexOf("sleep")!=-1){ out.print("发现非法字符！"); return; } orderby=orderby.replace(" ", ""); sql+=" order by "+orderby; }