php168վϵͳ֮CSRF

ӹԱҳΪhttp://192.168.0.3/php168/admin/index.php?lfj=member&job=addmember

ǿһ´ôдģ£

<form name="form1" method="post" action="index.php?lfj=member&action=addmember">
    <tr class="head"> 
      <td colspan="2">û</td>
    </tr>
    <tr bgcolor="#FFFFFF"> 
      <td width="37%">ʺ:</td>
      <td width="63%"> 
        <input type="text" name="postdb[username]">
      </td>
    </tr>
    <tr bgcolor="#FFFFFF"> 
      <td width="37%">:</td>
      <td width="63%"> 
        <input type="password" name="postdb[passwd]">
      </td>
    </tr>
    <tr bgcolor="#FFFFFF"> 
      <td width="37%">ظ:</td>
      <td width="63%"> 
        <input type="password" name="postdb[passwd2]">
      </td>
    </tr>
    <tr bgcolor="#FFFFFF"> 
      <td width="37%">û:<span help=1>ֻгԱ봴˲µĳԱ,ֻгԱ봴ʼ˼ǰ̨Աµǰ̨Ա</span></td>
      <td width="63%"> <select name='postdb[groupid]' ><option value='' selected>û</option>  <option value='http://www.hake.cc/a/security/web/jbst/2010/0418/2' >ο</option>  <option value='http://www.hake.cc/a/security/web/jbst/2010/0418/3' >Ա</option>  <option value='http://www.hake.cc/a/security/web/jbst/2010/0418/4' >ǰ̨Ա</option>  <option value=''>--+ϵͳ飬ǻԱ+--</option>  <option value='http://www.hake.cc/a/security/web/jbst/2010/0418/8' >ͨԱ</option>  <option value='http://www.hake.cc/a/security/web/jbst/2010/0418/9' >߼Ա</option> </select> </td>
    </tr>
    <tr bgcolor="#FFFFFF"> 
      <td width="37%">:</td>
      <td width="63%"> 
        <input type="text" name="postdb[email]">