first file: action.jsp
second file: searchBox.jsp
看看SQL注入:https://en.m.wikipedia.org/wiki/SQL_injection