php_bugs代碼審計(二)

1六、SQL注入註釋外包’及or繞過 <?php #GOAL: login as admin,then get the flag; error_reporting(0); require 'db.inc.php'; function clean($str){ if(get_magic_quotes_gpc()){ $str=stripslashes($str); } return h

>>阅读原文<<