易 想 团购 sms.php SQL injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

by 0x53sec http://www.freebuf.com/author/0x53sec sms. php file inside of several variables filter does not strictly lead to aSQL injectionvulnerabilities. Part of the code: elseif$REQUEST'act'=='dounsubscribeverify' $code = trim$REQUEST'code'; $mobile = trim$REQUEST'mobile'; $mobileitem =...