PHPweb 建站系统 cookies 注入漏洞

漏洞页面:member/post.php <?php define("ROOTPATH", "../"); include(ROOTPATH."includes/common.inc.php"); include("language/".$sLan.".php"); include(ROOTPATH."member/includes/member.inc.php"); $act = $_POST['act']; switch($act){ ...略 //读取头像 case "loadface": SecureMember(); $memberid=$_COOKIE["MEMBERID"]; $fsql->query("select nowface from {P}_member where memberid='$memberid'"