WooYun.org

<?php
define( "IN_LOCK", true );
require( "./includes/init.php" );
$searchWord = trim( $_GET['searchWord'] );
$searchWord1 = str_replace( "\\", "", $searchWord );
if ( $searchWord )
{
    $sql = "select model as keyword from ".$site->table( "product" ).( " where model like '".$searchWord."%' order by model limit 30" );
    $re1 = $db->getAll( $sql );
    $sql = "select product_desc.name as keyword from ".$site->table( "product" )." as product left join ".$site->table( "product_desc" ).( " as product_desc on product.product_id=product_desc.product_id where product.state=0  and (product_desc.name like '".$searchWord."%') and product_desc.language_id=" ).$_GET['language'];// 未作任何过滤，无视gpc
    $re2 = $db->getAll( $sql );
    $re = array_merge( $re1, $re2 );
    if ( empty( $re ) )
    {
        echo "<ul>";
        foreach ( $re as $val )
        {
            echo "\r\n<li>\r\n\t<span class=\"suggword\"><span class=\"keyin\">";
            echo $searchWord1;
            echo "</span>";
            echo substr( $val['keyword'], strlen( $searchWord1 ) );
            echo "</span>\r\n</li>\r\n\r\n\r\n";
        }
        echo "</ul>";
    }
}
?>