PHPWIND°汾SQLע© 

©

¶״̬



2011-08-26 ϵ̲ҵȴУϸڲ⹫
2011-08-26 Ѿ©ϸڹ


Ҫ

phpwindʵռλSQLУһСڵ㡣

ϸ˵


 phpwind/lib/utility/querybuilder.class.php
 _parseStatement
 
/phpwind/actions/ajax/leaveword.php
 һô
 Line 78
 $db->update(pwQuery::buildClause("UPDATE :pw_table SET leaveword=" . S::sqlEscape($atc_content) . " $sqladd WHERE pid=:pid AND tid=:tid", array($pw_posts, $pid, $tid)));
 
û$atc_contentڿܻռλ
 ҲûпpidӦΪֱ֣ȡַ
 Line31
 
S::gp(array(
 'pid',
 'atc_content',
 'ifmsg'
 ), 'P');
 
SQLע
 
PW滻˵ںţ滻),޷·ǳصSQLע©
 ύpid=asdatc_contentΪ:pidʾ
 Query Error: UPDATE pw_posts SET leaveword= ' 'asd' ' WHERE pid= 'asd' AND tid= '' 
