74cms sql 骑士CMS 注入漏洞 - 脚本漏洞

以下是引用片段：

function getip()
{
        if(getenv('HTTP_CLIENT_IP')){
                $onlineip=getenv('HTTP_CLIENT_IP');
        }else if(getenv('HTTP_X_FORWARDED_FOR')){
                $onlineip=getenv('HTTP_X_FORWARDED_FOR');
        }else if(getenv('REMOTE_ADDR')){
                $onlineip=getenv('REMOTE_ADDR');
        }else{
                $onlineip=$_SERVER['REMOTE_ADDR'];
        }
        return $onlineip;
}