LuckyC4t

Results 1 comments of LuckyC4t

it also has in the function `_arclist_single` ![image](https://user-images.githubusercontent.com/40694340/69968133-c3860d80-1554-11ea-8cba-6a0dab213403.png) ![image](https://user-images.githubusercontent.com/40694340/69968184-da2c6480-1554-11ea-8488-6a60f3c1eaa6.png) so we can splice evil sql query. but we should make `if($rs['fields_need'])` alway false ![image](https://user-images.githubusercontent.com/40694340/69968534-9423d080-1555-11ea-8a44-47bcf39d2f35.png) ![image](https://user-images.githubusercontent.com/40694340/69968556-9c7c0b80-1555-11ea-9731-1db89938198a.png)