ecshop漏洞/goods.php SQL Injection Vul修复方法

catalogue
1. 漏洞描述
2. 漏洞触发条件
3. 漏洞影响范围
4. 漏洞代码分析
5. 防御方法
6. 攻防思考
1. 漏洞描述
2. 漏洞触发条件
0x1: poc
3. 漏洞影响范围
4. 漏洞代码分析

/goods.php
/* 修改 start by zhouH*/
if (!empty($_REQUEST['act']) && $_REQUEST['act'] == 'getGoodsInfo')
{
include('includes/cls_json.php');
$json = new JSON;
$res = array('err_msg' => '', 'result' => '', 'goods_img' => '');
//直接接收外部参数，未进行有效过滤
$goods_id = $_REQUEST['id'];
if(!empty($goods_id))
{
/* 获得商品的信息 */
//将外部参数带入SQL查询
$goods = get_goods_info($goods_id);
res['result'] = $goods;
..
$goods = get_goods_info($goods_id);

5. 防御方法
/goods.php

/* 修改 start by zhouH*/
if (!empty($_REQUEST['act']) && $_REQUEST['act'] == 'getGoodsInfo')
{
include('includes/cls_json.php');
$json = new JSON;
$res = array('err_msg' => '', 'result' => '', 'goods_img' => '');
/**/
$goods_id = intval($_REQUEST['id']);
/**/
if(!empty($goods_id))
{

6. 攻防思考
Copyright (c) 2016 Little5ann All rights reserved

疯狂暗示打赏按钮

本文标签：

声明：本文由代码号注册/游客用户【天荷】供稿发布，本站不对用户发布的ecshop漏洞/goods.php SQL Injection Vul修复方法信息内容原创度和真实性等负责。如内容侵犯您的版权或其他权益，请留言并加以说明。站长审查之后若情况属实会及时为您删除。同时遵循 CC 4.0 BY-SA 版权协议，尊重和保护作者的劳动成果，转载请标明出处链接和本声明内容。本文作者：天荷» https://www.ebingou.cn/dmh/13745.html

很赞哦！ ()