Тема: Ваши вопросы по уязвимостям.
Показать сообщение отдельно

  #2  
Старый 04.11.2011, 19:53
Boolean
Участник форума
Регистрация: 05.09.2010
Сообщений: 147
С нами: 8255126

Репутация: 78
По умолчанию
Вот вам сорцы =)

PHP код:
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#007700"]if ([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]is_valid_poll_id[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"])) {

[/COLOR][COLOR="#0000BB"]$voted[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]has_voted[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]);

[/COLOR][COLOR="#0000BB"]$is_active[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]is_active_poll_id[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]);

 if ([/COLOR][COLOR="#0000BB"]$action[/COLOR][COLOR="#007700"]==[/COLOR][COLOR="#DD0000"]"results"[/COLOR][COLOR="#007700"]&&[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]==[/COLOR][COLOR="#0000BB"]$poll_ident[/COLOR][COLOR="#007700"]) {

 return[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]view_poll_result[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]);

 } elseif (![/COLOR][COLOR="#0000BB"]$is_active[/COLOR][COLOR="#007700"]) {

 return[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]view_poll_result[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]);

 } elseif ([/COLOR][COLOR="#0000BB"]$is_active[/COLOR][COLOR="#007700"]&&[/COLOR][COLOR="#0000BB"]$voted[/COLOR][COLOR="#007700"]) {

 return[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]view_poll_result[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"]);

[/COLOR][/COLOR] 
PHP код:
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#007700"]function[/COLOR][COLOR="#0000BB"]is_valid_poll_id[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]) {

[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]intval[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]);

 if ([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]>[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]) {

[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]fetch_array[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]query[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"SELECT poll_id FROM "[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]tbl[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'poll_index'[/COLOR][COLOR="#007700"]].[/COLOR][COLOR="#DD0000"]" WHERE poll_id=[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#DD0000"]AND status[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]record[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'poll_id'[/COLOR][COLOR="#007700"]]) ?[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"]:[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];

 } else {

 return[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];

 }

 }

[/COLOR][/COLOR] 
PHP код:
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#007700"]function[/COLOR][COLOR="#0000BB"]is_active_poll_id[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]) {

[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]intval[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]);

[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]fetch_array[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]query[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"SELECT * FROM "[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]tbl[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'poll_index'[/COLOR][COLOR="#007700"]].[/COLOR][COLOR="#DD0000"]" WHERE (poll_id='[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#DD0000"]' AND status=1)"[/COLOR][COLOR="#007700"]));

 if (![/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]record[/COLOR][COLOR="#007700"]) {

 return[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];

 } elseif ([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]record[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'expire'[/COLOR][COLOR="#007700"]]==[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]) {

 return[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"];

 }

 return ([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]record[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'exp_time'[/COLOR][COLOR="#007700"]][/COLOR][COLOR="#0000BB"]poll_result_html[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]]) || !isset([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]poll_result_html[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]template_set[/COLOR][COLOR="#007700"]])) {

[/COLOR][COLOR="#0000BB"]$pollvars[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]pollvars[/COLOR][COLOR="#007700"];

[/COLOR][COLOR="#0000BB"]$row[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]fetch_array[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]db[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]query[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"SELECT * FROM "[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]tbl[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'poll_index'[/COLOR][COLOR="#007700"]].[/COLOR][COLOR="#DD0000"]" WHERE (poll_id = '[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#DD0000"]')"[/COLOR][COLOR="#007700"]));

 if (![/COLOR][COLOR="#0000BB"]$row[/COLOR][COLOR="#007700"]) {

 return[/COLOR][COLOR="#DD0000"]""[/COLOR][COLOR="#007700"];

 }

[/COLOR][COLOR="#0000BB"]$question[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$row[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'question'[/COLOR][COLOR="#007700"]];

[/COLOR][COLOR="#0000BB"]$VOTE[/COLOR][COLOR="#007700"]= ([/COLOR][COLOR="#0000BB"]$vote_stat[/COLOR][COLOR="#007700"]==[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"]) ?[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]pollvars[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'voted'[/COLOR][COLOR="#007700"]] :[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"];

[/COLOR][COLOR="#0000BB"]$COMMENT[/COLOR][COLOR="#007700"]= ([/COLOR][COLOR="#0000BB"]$row[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'comments'[/COLOR][COLOR="#007700"]]==[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"]) ?[/COLOR][COLOR="#DD0000"]"[/COLOR][COLOR="#0000BB"]template_set[/COLOR][COLOR="#DD0000"]','[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#DD0000"]','width=230,height=320,toolbar=no,statusbar=no'))\">"[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]pollvars[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'send_com'[/COLOR][COLOR="#007700"]].[/COLOR][COLOR="#DD0000"]""[/COLOR][COLOR="#007700"]:[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"];

 eval([/COLOR][COLOR="#DD0000"]"\$result_html = \""[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]get_poll_tpl[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"result_head"[/COLOR][COLOR="#007700"]).[/COLOR][COLOR="#DD0000"]"\";"[/COLOR][COLOR="#007700"]);

[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"];

[/COLOR][COLOR="#0000BB"]$loop_html[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]get_poll_tpl[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"result_loop"[/COLOR][COLOR="#007700"]);

 if (!isset([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]])) {

[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]get_poll_data[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]);

 }

[/COLOR][COLOR="#0000BB"]$maxvote[/COLOR][COLOR="#007700"]= ([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'maxvote'[/COLOR][COLOR="#007700"]] ==[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]) ?[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"]:[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'maxvote'[/COLOR][COLOR="#007700"]];

[/COLOR][COLOR="#0000BB"]$totalvotes[/COLOR][COLOR="#007700"]= ([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'total'[/COLOR][COLOR="#007700"]] ==[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]) ?[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"]:[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'total'[/COLOR][COLOR="#007700"]];

 for ([/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"];[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"][/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'option_id'[/COLOR][COLOR="#007700"]]);[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]++) {

[/COLOR][COLOR="#0000BB"]$img_width[/COLOR][COLOR="#007700"]= (int) ([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'votes'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]]*[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]pollvars[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'img_length'[/COLOR][COLOR="#007700"]]/[/COLOR][COLOR="#0000BB"]$maxvote[/COLOR][COLOR="#007700"]);

[/COLOR][COLOR="#0000BB"]$vote_count[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'votes'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]];

[/COLOR][COLOR="#0000BB"]$vote_percent[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]sprintf[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"%.2f"[/COLOR][COLOR="#007700"],([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'votes'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]]*[/COLOR][COLOR="#0000BB"]100[/COLOR][COLOR="#007700"]/[/COLOR][COLOR="#0000BB"]$totalvotes[/COLOR][COLOR="#007700"]));

[/COLOR][COLOR="#0000BB"]$vote_val[/COLOR][COLOR="#007700"]= ([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]pollvars[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'type'[/COLOR][COLOR="#007700"]] ==[/COLOR][COLOR="#DD0000"]"percent"[/COLOR][COLOR="#007700"]) ?[/COLOR][COLOR="#0000BB"]sprintf[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"%.1f"[/COLOR][COLOR="#007700"],([/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'votes'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]]*[/COLOR][COLOR="#0000BB"]100[/COLOR][COLOR="#007700"]/[/COLOR][COLOR="#0000BB"]$totalvotes[/COLOR][COLOR="#007700"])).[/COLOR][COLOR="#DD0000"]"%"[/COLOR][COLOR="#007700"]:[/COLOR][COLOR="#0000BB"]$vote_count[/COLOR][COLOR="#007700"];

[/COLOR][COLOR="#0000BB"]$option_text[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'option_text'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]];

[/COLOR][COLOR="#0000BB"]$option_votes[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'votes'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]];

[/COLOR][COLOR="#0000BB"]$poll_color[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'color'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$i[/COLOR][COLOR="#007700"]];

 eval([/COLOR][COLOR="#DD0000"]"\$result_html .= \"[/COLOR][COLOR="#0000BB"]$loop_html[/COLOR][COLOR="#DD0000"]\";"[/COLOR][COLOR="#007700"]);

 }

[/COLOR][COLOR="#0000BB"]$total_votes[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'total'[/COLOR][COLOR="#007700"]];

 eval([/COLOR][COLOR="#DD0000"]"\$result_html .= \""[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]get_poll_tpl[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]"result_foot"[/COLOR][COLOR="#007700"]).[/COLOR][COLOR="#DD0000"]"\";"[/COLOR][COLOR="#007700"]);

[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]poll_result_html[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]template_set[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]$result_html[/COLOR][COLOR="#007700"];

 }

 return[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]poll_result_html[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]$poll_id[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#0000BB"]$this[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]template_set[/COLOR][COLOR="#007700"]];

 }

[/COLOR][/COLOR] 
Собстна, учитывая что на сервере mg=ON, и версия mysql 4, то только blind sqli. on error based не прокатит.
 
Ответить с цитированием