Категории

(((( (v2.5.2)

Requested : /affiliate_show_banner.php?affiliate_banner_id=-1+UNION+SELECT+0x6F6B2E67696%25206,1+FROM+customers+WHERE+customers_id=1+AND+ASCII(SUBSTRING(customers_password,19,1))IN(54,55)%2523%2520HTTP/1.0%2522%2520200%2520668%2520%2522-%2522%2520%2522-%2522
Trace Back : affiliate_show_banner.php:84(os_db_queryarray(1) {; =>; &string(309) "select affiliate_banners_image, affiliate_products_id from os_affiliate_banners where affiliate_banners_id = -1 UNION SELECT 0x6F6B2E67696%206,1 FROM customers WHERE customers_id=1 AND ASCII(SUBSTRING(customers_password,19,1))IN(54,55)%23%20HTTP/1.0%22%20200%20668%20%22-%22%20%22-%22 and affiliate_status = 1"; }; ) => includes/functions/admin.include.php:3187(os_db_errorarray(3) {; =>; &string(309) "select affiliate_banners_image, affiliate_products_id from os_affiliate_banners where affiliate_banners_id = -1 UNION SELECT 0x6F6B2E67696%206,1 FROM customers WHERE customers_id=1 AND ASCII(SUBSTRING(customers_password,19,1))IN(54,55)%23%20HTTP/1.0%22%20200%20668%20%22-%22%20%22-%22 and affiliate_status = 1"; =>; &int(1064); =>; &string(220) "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to us
e near '%23%20HTTP/1.0%22%20200%20668%20%22-%22%20%22-%22 and affiliate_status = 1' at line 1"; }; ) => includes/functions/admin.include.php:3274(db->errorarray(3) {; =>; &string(309) "select affiliate_banners_image, affiliate_products_id from os_affiliate_banners where affiliate_banners_id = -1 UNION SELECT 0x6F6B2E67696%206,1 FROM customers WHERE customers_id=1 AND ASCII(SUBSTRING(customers_password,19,1))IN(54,55)%23%20HTTP/1.0%22%20200%20668%20%22-%22%20%22-%22 and affiliate_status = 1"; =>; &int(1064); =>; &string(220) "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '%23%20HTTP/1.0%22%20200%20668%20%22-%22%20%22-%22 and affiliate_status = 1' at line 1"; }; )

критическая бага

вот фикс

http://code.google.com/p/shopos/source/detail?r=1776

или заменить affiliate_show_banner.php на прикрепленный

Источник