口福科技网上订餐系统平台版SQL注入及修复

extract($_GET);//变量覆盖$gid=intval($_GET['gid']);$gcate[$gid]=$gcate[$gid]?$gcate[$gid]:0;$_GET['a']=$_GET['a']?htmlspecialchars(trim($_GET['a'])):'index';switch($_GET['a']){case 'index':$userid=intval($_SESSION['ssuser']['userid']);//区域选择$provinces=provinces($cksiteid);$smarty->assign("provinces",$provinces);if($_GET['provinceid']){$_GET['provinceid']=intval($_GET['provinceid']);$citys=citys(intval($_GET['provinceid']));$towns=towns(intval($_GET['cityid']));$smarty->assign("citys",$citys);$smarty->assign("towns",$towns);}//店铺类目$_GET['catid']=intval($_GET['catid']);!empty($gcate[$gid]) && $catlist=$db->getAll("SELECT * FROM ".table('shop_cat')." WHERE catid IN(".$gcate[$gid].")  ORDER BY orderindex ASC ");//注入