ثغره بسيطة وهنا الحل ((يرجى القرائة))

[AC]

?????? ?????

???? ???? ????? ?? ??? search.php ...???? ???? ??? ??? ???

???? ????? search.php ??? ???? ???? ????? ?? ((?? ?????? 2.0.6 ????? ????? 685 ??????? ))

كود: تحديد الكل

      if ( intval($search_id) ) 
      { 
         $sql = "SELECT search_array 
            FROM " . SEARCH_TABLE . " 
            WHERE search_id = $search_id  
               AND session_id = '". $userdata['session_id'] . "'"; 

??????? ???????

كود: تحديد الكل

      $search_id = intval($search_id); 
      if ( $search_id ) 
      { 
         $sql = "SELECT search_array 
            FROM " . SEARCH_TABLE . " 
            WHERE search_id = $search_id  
               AND session_id = '". $userdata['session_id'] . "'"; 

???? ????? ??? ?????? ?? ???? ??? phpBB 2.0.x .....

?? ??? ?????? ?????? 2.0.6 ?? ????? ??????? ??? ????? ??? ??????? ???????? ?????? ??? ??

??? ????? ?? ?????? ????

???? ???????

كود: تحديد الكل

http://your_site/phpBB2/search.php?search_id=1\ 

??? ???? ?????

?????? ?? ????? ????? ???? ????? ???????

??? ???? ?????? ??? ?? ???? ???? ???? ?? ????? ??? ??? ?? ???? SQL ???? ????


??????