行业之星 0.87 注入漏洞

if($_REQUEST['op'] == 'poll') {
        if($_POST['op'] && $_POST['vtid']) //得Post提交上去
        {
                /* 判断是否已经投过票 24 =86400 小时限制 */
                $times = 11600;
                $add_ip = true;
        $ip = real_ip();       
        $db_table = $pre."vote_ip";
            $sql = "SELECT add_time FROM ".$pre."vote_ip
                       where vtid = ".$_POST['vtid']."  //vtid没过滤
                           AND ip = '$ip'
                           AND domain_id=".$_SESSION[$un_domain_id]." ORDER BY vipid desc LIMIT 1 ";
            $Aip = $oPub->selectrow($sql);