安恒周周练西湖论剑版web美男子题：巧用group by with rollup

安恒周周练西湖论剑版web美男子题：巧用group by with rollup

2019年4月8日15:49:30

源码：

<?phpinclude 'global.php';function AttackFilter($StrKey,$StrValue,$ArrReq){  if(is_array($StrValue)){$StrValue=implode($StrValue);}if (preg_match("/".$ArrReq."/is",$StrtValue)==1){   print "holy shit!";exit();}      } $filter = "union|select|from|where|join|sleep|benchmark|,|\(|\)";foreach($_POST as $key=>$value){ AttackFilter($key,$value,$filter);}if(!isset($_POST['key1']) || !isset($_POST['key2'])) {print <<<DBAPP<img src='image/img.jpg' /><!--index.phps-->DBAPP;die;}$query = mysql_query("SELECT * FROM tb_ctf WHERE key1 = '{$_POST['key1']}'"); if(mysql_num_row