Clicks submitted outside Lily net

Design defects lead to external submissions to increase popularity
Detailed Description: If you are the one in the lily network, design defects can lead to unlimited popularity.
 
1. log on to Lily. net.
2 open http://fcwr.baihe.com/userinfo.php? Id = 554
 
 
 
 
You can vote 10 times by default.
 
 
 
 
Let's refresh the page and vote again.
Proof of vulnerability: http://fcwr.baihe.com/ajaxSave.php? Jsoncallback = 9 & act = ding & uid = 554.
 
Uid refers to the id we want to brush, we can use the tool to submit unlimited.
Test:
Before refreshing.
 
 




 
After refreshing the image. Www.2cto.com
 
 
 
Successfully upgraded
Solution:

Restricted ip address, restricted id

Author: lanfeng