漏洞存在于ask/search.php文件，以下是漏洞代码：
复制内容到剪贴板
代码:
if($keywords)
{
    $where .= " AND title LIKE ''%$keywords%''";
}
$infos = $ask->listinfo($where, ''askid DESC'', $page, 20);
下面我们来看看listinfo()过程的代码：
复制内容到剪贴板
代码:
    function listinfo($where = '''', $order = '''', $page = 1, $pagesize = 50)
    {
        if($where) $where = " WHERE $where";
        if($order) $order = " ORDER BY $order";
        $page = max(intval($page), 1);
        $offset = $pagesize*($page-1);
        $limit = " LIMIT $offset, $pagesize";
        $r = $this->db->get_one("SELECT count(*) as number FROM $this->table $where");
Oh yeah！！注射漏洞就这么产生了