beescms X-Forwarded-For 注射

//........................

        $ip=fl_html(fl_value(get_ip()));

        $sql="update ".DB_PRE."member set member_time='{$addtime}',member_ip='{$ip}' where id={$last_id}";

        $GLOBALS['mysql']->query($sql);

//........................

elseif($action=='out'){

        $m_ip=fl_html(fl_value(get_ip()));

        $_SESSION['m_ip']=$m_ip;

function get_ip(){

if(!empty($_SERVER['HTTP_CLIENT_IP']))

        {

                return $_SERVER['HTTP_CLIENT_IP'];

        }

        elseif(!empty($_SERVER['HTTP_X_FORWARDED_FOR']))

        {

                return $_SERVER['HTTP_X_FORWARDED_FOR'];

        }

        else

        {

                return $_SERVER['REMOTE_ADDR'];

        }

}

function fl_value($str){

        if(empty($str)){return;}

        return preg_replace('/select|insert | update | and | in | on | left | joins | delete |\%|\sss=|\/\*|\*|\.\.\/|\.\/| union | from | where | group | into |load_file

|outfile/','',$str);//大小写可绕过。

}

function fl_html($str){

        return htmlspecialchars($str);

}