LuckyC4t
Results
1
comments of
LuckyC4t
it also has in the function `_arclist_single`   so we can splice evil sql query. but we should make `if($rs['fields_need'])` alway false  