Ecmall somewhere SQL secondary injection of the third bomb-vulnerability warning-the black bar safety net

Although in 2 0 1 4 0 6 1 8 The Anti-implantation patch to add the anti-injection code, but still can barely get around. In app/mygoods. app. php function edit $id = empty$GET'id' ? 0 : intval$GET'id'; if ! ISPOST $this-assign'goods', $this-getgoodsinfo$id; / Get categories /...