feizi76

Vulnerability file: www/api/sms_check.php ```

I found a lot of such code in our extensive penetration test. `$sql=$Data->query("select * from users where id=$id"); $sql=$Data->where("id=$id")->select();` Such code is not pre-processed by sql during preprocessing. can be...