sql注射:http://db.duowan.com/ptr/spells.php?c=9
 
详情:
Target: http://db.duowan.com/ptr/spells.php?c=9
Host IP: 113.108.228.195
Web Server: nginx/1.0.1
Powered-by: PHP/5.3.10
DB Server: MySQL >=5
Resp. Time(avg): 488 ms
Current User: xwotlkfool@localhost
Sql Version: 5.0.75-0ubuntu10.5-log
Current DB: ptr
System User: xwotlkfool@localhost
Host Name: ubuntu
Installation dir: /usr/
DB User: 'xwotlkfool'@'localhost'
Data Bases: information_schema
cwlk
gdbwow
ptr
twcata
twow www.2cto.com
zhtw




 
 
 
修复方案：

你们比我懂
作者 shift