Industry star 0.87 vote. php injection and repair

 

Team: t00ls Author: Cond0r

Code.

Vote. php

 

If ($ _ REQUEST ['op'] = 'Poll '){

If ($ _ POST ['op'] & $ _ POST ['vtid']) // submit the Post

{

/* Determine whether a ticket has been cast for 24 = 86400 hours */

$ Times = 11600;

$ Add_ip = true;

$ Ip = real_ip (); www.2cto.com

$ Db_table = $ pre. "vote_ip ";

$ SQL = "SELECT add_time FROM". $ pre. "vote_ip

Where vtid = ". $ _ POST ['vtid']." // vtid is not filtered.

AND ip = '$ ip'

AND domain_id = ". $ _ SESSION [$ un_domain_id].

"Order by vipid desc

LIMIT 1 ";

$ Aip = $ oPub-> selectrow ($ SQL );

 

Www.2cto.com fix: Filter vtid based on the above Code