Con-IMedia SQL Injection defects and repair

Title: Con-IMedia SQL inj: vulnerable
Author: nGa Sa Lu [GaNgst3r]
Test Platform: Vista
Programming Language: php
========================================================== ======================================
SQL Error Statement:
Warning: mysql_fetch_array (): supplied argument is not a valid MySQL result resource in
/Homepages/18/d158663934/htdocs/moneysystems/modules/mod_main.php on line 92

[+] Http://www.bkjia.com/index1.php? Linkid = [SQL HERE]

[+] Demo:
Http://www.gse.com.gh/index1.php? Linkid = 33'
Http://www.money-systems.net/index1.php? Linkid = 262'

Www.2cto.com repair

Filter the index1.php page. Enter the linkid parameter as a number.