Injection and repair of xunqi tourism website system

The whole system is injected!
 
Example: Jingdian_Show.asp
 
News_Show.asp
 
These files contain UU. Lable. All. asp
Code: www.2cto.com
 
Function UU_Lable_JingdianS (strList)
Set rs = Server. CreateObject ("adodb. recordset ")
SQL = "select * from UU_Jingdian where Jingdian_id =" & Jingdian_id &""
Rs. Open SQL, Conn, 1, 1
If Not (rs. bof And rs. eof) Then
Moban = Get_Html_Jingdian (strList, 2)
City_id = rs ("City_classid ")
Else
Moban = "no record"
End If
Rs. Close
Set rs = nothing
End Function
 
No Filtering
 
Table Name: UU_admin
 
Field: admin_name, admin_pass
 
Background: Admin _ A/UU_Login.asp


Www.2cto.com provides the repair solution:

Perform regular filtering on the corresponding variable input.