WooYun.org

public void CheckSubjectOK()
{
	EFClassCourseManager eFClassCourseManager = new EFClassCourseManager();
	string request = base.GetRequest("ClassAdjustID");   //这里四个参数都没有过滤直接带入查询。
	string request2 = base.GetRequest("SubjectID");
	string request3 = base.GetRequest("ID");
	string request4 = base.GetRequest("TeacherID");
	int num = eFClassCourseManager.CheckSubjectOK(null, request, request2, request3, request4);
	if (num > 0)
	{
		base.Response.Clear();
		base.Response.Write("{success:true}");
	}
	else
	{
		base.Response.Clear();
		base.Response.Write("{success:false}");
	}
}