ECSHOP商城系统过滤不严导致SQL注入漏洞

漏洞分析 首先来看includes/init.php文件，在getmagicquotesgpc为off时则调用addslashesdeep // includes/init.php if !getmagicquotesgpc if !emptyempty$GET $GET = addslashesdeep$GET; if !emptyempty$POST $POST = addslashesdeep$POST; $COOKIE = addslashesdeep$COOKIE; $REQUEST = addslashesdeep$REQUEST;...