ecshop的sql注入漏洞修复方法实例

admin_priv('shopinfo_manage');

admin_priv('shopinfo_manage');
$_REQUEST['id'] = intval($_REQUEST['id']);

admin_priv('shophelp_manage');

admin_priv('shophelp_manage');
$_POST['id'] = intval($_POST['id']);

/* SQL注入过滤 */
if (get_magic_quotes_gpc()) {
$post['UserId']=$post['UserId']
} else {
$post['UserId']=addslashes($post['UserId']);
}
$post['username'] = isset($post['UserId']) ? trim($post['UserId']) : '';
$post['password'] = isset($post['Password']) ? strtolower(trim($post['Password'])) : '';

$dst_items[$i] = $_POST['item_id'][$i] .' = '. '"' .$_POST['item_content'][$i]. '";';

$dst_items[$i] = $_POST['item_id'][$i] .' = '. '\'' .$_POST['item_content'][$i]. '\';';

$sqladd = ' AND a.user_id=' . $_GET['auid'];

$sqladd = ' AND a.user_id=' . intval($_GET['auid']);

$filter['sort_by'] = empty($_REQUEST['sort_by']) ? 'add_time' : trim($_REQUEST['sort_by']);
$filter['sort_order'] = empty($_REQUEST['sort_order']) ? 'DESC' : trim($_REQUEST['sort_order']);

$sort = array('comment_id','comment_rank','add_time','id_value','status');
$filter['sort_by'] = in_array($_REQUEST['sort_by'], $sort) ? trim($_REQUEST['sort_by']) : 'add_time';
$filter['sort_order'] = empty($_REQUEST['sort_order']) ? 'DESC' : 'ASC';

$order_sn = trim($order_sn);

$order_sn = trim(addslashes($order_sn));

$arr['id'] = intval($arr['id']);
$arr['num'] = intval($arr['num']);
$arr['type'] = addslashes($arr['type']);

$code = empty($_GET['code']) ? '' : trim($_GET['code']);

$code = empty($_GET['code']) ? '' : trim(addslashes($_GET['code']));