WooYun.org

if($_REQUEST['act']=='verify_ecv')
{
	$ecvsn = trim($_REQUEST['ecvsn']);
	$ecvpassword = trim($_REQUEST['ecvpassword']);
	$user_id = intval($GLOBALS['user_info']['id']);
	$now = get_gmtime();
	$ecv_sql = "select e.*,et.name from ".DB_PREFIX."ecv as e left join ".
				DB_PREFIX."ecv_type as et on e.ecv_type_id = et.id where e.sn = '".
				$ecvsn."' and e.password = '".
				$ecvpassword."' and ((e.begin_time <> 0 and e.begin_time < ".$now.") or e.begin_time = 0) and ".
				"((e.end_time <> 0 and e.end_time > ".$now.") or e.end_time = 0) and ((e.use_limit <> 0 and e.use_limit > e.use_count) or (e.use_limit = 0)) ".
				"and (e.user_id = ".$user_id." or e.user_id = 0)";