2022021509_fetchPageData.log 41 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348
  1. 09:46:33 [error]: 通用分页查询排序接口异常:数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1--' at line 1
  2. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889593 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select 1--
  3. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1--' at line 1"]
  4. 异常发生在文件:[/bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php]的[53]行 code[0] !
  5. 异常堆栈上下文:
  6. #0 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once()
  7. #1 {main}
  8. 数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1--' at line 1
  9. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889593 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select 1--
  10. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1--' at line 1"]
  11. 异常发生在文件:[/bizroot/approot/klywebapi/base/mysql.php]的[104]行 code[0] !
  12. 异常堆栈上下文:
  13. #0 /bizroot/approot/klywebapi/base/mysql.php(207): PdoUtil->errhandle()
  14. #1 /bizroot/approot/klywebapi/base/mysql.php(29): PdoUtil->fetchall()
  15. #2 /bizroot/approot/klywebapi/prjcenter/prjKLY/base/AboutActivity.php(1351): pdo_fetchall()
  16. #3 /bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php(25): bizbase_recruitAboutQuery()
  17. #4 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once('/bizroot/approo...')
  18. #5 {main}
  19. [上下文相关信息]:
  20. [WsAjaxBiz]=Public
  21. [WsAjaxPrj]=KLY
  22. [WsAjaxAction]=fetchPageData
  23. [ETK]=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  24. [USER]=nginxphp
  25. [HOME]=/home/nginxphp
  26. [HTTP_CONTENT_TYPE]=application/json
  27. [HTTP_REFERER]=https://api.kuailaiyou.top/
  28. [HTTP_USER_AGENT]=Tencent Security Team, more information: https://mmbizurl.cn/s/Wqsoj2SAz cc98
  29. [HTTP_ACCEPT]=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  30. [HTTP_CONTENT_LENGTH]=281
  31. [HTTP_TENCENT_LEAKSCAN]=TST(Tencent Security Team)
  32. [HTTP_COOKIE]=ETK=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  33. [HTTP_HOST]=api.kuailaiyou.top
  34. [REDIRECT_STATUS]=200
  35. [SERVER_NAME]=api.kuailaiyou.top
  36. [SERVER_PORT]=443
  37. [SERVER_ADDR]=172.18.217.149
  38. [REMOTE_PORT]=50220
  39. [REMOTE_ADDR]=106.55.202.118
  40. [SERVER_SOFTWARE]=nginx/1.20.1
  41. [GATEWAY_INTERFACE]=CGI/1.1
  42. [HTTPS]=on
  43. [REQUEST_SCHEME]=https
  44. [SERVER_PROTOCOL]=HTTP/1.1
  45. [DOCUMENT_ROOT]=/bizroot/approot/klywebapi
  46. [DOCUMENT_URI]=/ajaxEntryCenter.php
  47. [REQUEST_URI]=/ajaxEntryCenter.php?WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  48. [SCRIPT_NAME]=/ajaxEntryCenter.php
  49. [CONTENT_LENGTH]=281
  50. [CONTENT_TYPE]=application/json
  51. [REQUEST_METHOD]=POST
  52. [QUERY_STRING]=WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  53. [SCRIPT_FILENAME]=/bizroot/approot/klywebapi/ajaxEntryCenter.php
  54. [FCGI_ROLE]=RESPONDER
  55. [PHP_SELF]=/ajaxEntryCenter.php
  56. [REQUEST_TIME_FLOAT]=1644889593.422
  57. [REQUEST_TIME]=1644889593
  58. 09:46:33 [error]: 通用分页查询排序接口异常:数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,2--' at line 1
  59. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889593 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select 1,2--
  60. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,2--' at line 1"]
  61. 异常发生在文件:[/bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php]的[53]行 code[0] !
  62. 异常堆栈上下文:
  63. #0 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once()
  64. #1 {main}
  65. 数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,2--' at line 1
  66. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889593 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select 1,2--
  67. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,2--' at line 1"]
  68. 异常发生在文件:[/bizroot/approot/klywebapi/base/mysql.php]的[104]行 code[0] !
  69. 异常堆栈上下文:
  70. #0 /bizroot/approot/klywebapi/base/mysql.php(207): PdoUtil->errhandle()
  71. #1 /bizroot/approot/klywebapi/base/mysql.php(29): PdoUtil->fetchall()
  72. #2 /bizroot/approot/klywebapi/prjcenter/prjKLY/base/AboutActivity.php(1351): pdo_fetchall()
  73. #3 /bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php(25): bizbase_recruitAboutQuery()
  74. #4 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once('/bizroot/approo...')
  75. #5 {main}
  76. [上下文相关信息]:
  77. [WsAjaxBiz]=Public
  78. [WsAjaxPrj]=KLY
  79. [WsAjaxAction]=fetchPageData
  80. [ETK]=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  81. [USER]=nginxphp
  82. [HOME]=/home/nginxphp
  83. [HTTP_CONTENT_TYPE]=application/json
  84. [HTTP_REFERER]=https://api.kuailaiyou.top/
  85. [HTTP_USER_AGENT]=Tencent Security Team, more information: https://mmbizurl.cn/s/Wqsoj2SAz cc98
  86. [HTTP_ACCEPT]=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  87. [HTTP_CONTENT_LENGTH]=283
  88. [HTTP_TENCENT_LEAKSCAN]=TST(Tencent Security Team)
  89. [HTTP_COOKIE]=ETK=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  90. [HTTP_HOST]=api.kuailaiyou.top
  91. [REDIRECT_STATUS]=200
  92. [SERVER_NAME]=api.kuailaiyou.top
  93. [SERVER_PORT]=443
  94. [SERVER_ADDR]=172.18.217.149
  95. [REMOTE_PORT]=50220
  96. [REMOTE_ADDR]=106.55.202.118
  97. [SERVER_SOFTWARE]=nginx/1.20.1
  98. [GATEWAY_INTERFACE]=CGI/1.1
  99. [HTTPS]=on
  100. [REQUEST_SCHEME]=https
  101. [SERVER_PROTOCOL]=HTTP/1.1
  102. [DOCUMENT_ROOT]=/bizroot/approot/klywebapi
  103. [DOCUMENT_URI]=/ajaxEntryCenter.php
  104. [REQUEST_URI]=/ajaxEntryCenter.php?WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  105. [SCRIPT_NAME]=/ajaxEntryCenter.php
  106. [CONTENT_LENGTH]=283
  107. [CONTENT_TYPE]=application/json
  108. [REQUEST_METHOD]=POST
  109. [QUERY_STRING]=WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  110. [SCRIPT_FILENAME]=/bizroot/approot/klywebapi/ajaxEntryCenter.php
  111. [FCGI_ROLE]=RESPONDER
  112. [PHP_SELF]=/ajaxEntryCenter.php
  113. [REQUEST_TIME_FLOAT]=1644889593.4704
  114. [REQUEST_TIME]=1644889593
  115. 09:46:38 [error]: 通用分页查询排序接口异常:数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select md5(3141592657),2--' at line 1
  116. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889598 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select md5(3141592657),2--
  117. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select md5(3141592657),2--' at line 1"]
  118. 异常发生在文件:[/bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php]的[53]行 code[0] !
  119. 异常堆栈上下文:
  120. #0 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once()
  121. #1 {main}
  122. 数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select md5(3141592657),2--' at line 1
  123. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889598 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select md5(3141592657),2--
  124. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select md5(3141592657),2--' at line 1"]
  125. 异常发生在文件:[/bizroot/approot/klywebapi/base/mysql.php]的[104]行 code[0] !
  126. 异常堆栈上下文:
  127. #0 /bizroot/approot/klywebapi/base/mysql.php(207): PdoUtil->errhandle()
  128. #1 /bizroot/approot/klywebapi/base/mysql.php(29): PdoUtil->fetchall()
  129. #2 /bizroot/approot/klywebapi/prjcenter/prjKLY/base/AboutActivity.php(1351): pdo_fetchall()
  130. #3 /bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php(25): bizbase_recruitAboutQuery()
  131. #4 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once('/bizroot/approo...')
  132. #5 {main}
  133. [上下文相关信息]:
  134. [WsAjaxBiz]=Public
  135. [WsAjaxPrj]=KLY
  136. [WsAjaxAction]=fetchPageData
  137. [ETK]=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  138. [USER]=nginxphp
  139. [HOME]=/home/nginxphp
  140. [HTTP_CONTENT_TYPE]=application/json
  141. [HTTP_REFERER]=https://api.kuailaiyou.top/
  142. [HTTP_USER_AGENT]=Tencent Security Team, more information: https://mmbizurl.cn/s/Wqsoj2SAz cc98
  143. [HTTP_ACCEPT]=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  144. [HTTP_CONTENT_LENGTH]=297
  145. [HTTP_TENCENT_LEAKSCAN]=TST(Tencent Security Team)
  146. [HTTP_COOKIE]=ETK=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  147. [HTTP_HOST]=api.kuailaiyou.top
  148. [REDIRECT_STATUS]=200
  149. [SERVER_NAME]=api.kuailaiyou.top
  150. [SERVER_PORT]=443
  151. [SERVER_ADDR]=172.18.217.149
  152. [REMOTE_PORT]=50220
  153. [REMOTE_ADDR]=106.55.202.118
  154. [SERVER_SOFTWARE]=nginx/1.20.1
  155. [GATEWAY_INTERFACE]=CGI/1.1
  156. [HTTPS]=on
  157. [REQUEST_SCHEME]=https
  158. [SERVER_PROTOCOL]=HTTP/1.1
  159. [DOCUMENT_ROOT]=/bizroot/approot/klywebapi
  160. [DOCUMENT_URI]=/ajaxEntryCenter.php
  161. [REQUEST_URI]=/ajaxEntryCenter.php?WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  162. [SCRIPT_NAME]=/ajaxEntryCenter.php
  163. [CONTENT_LENGTH]=297
  164. [CONTENT_TYPE]=application/json
  165. [REQUEST_METHOD]=POST
  166. [QUERY_STRING]=WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  167. [SCRIPT_FILENAME]=/bizroot/approot/klywebapi/ajaxEntryCenter.php
  168. [FCGI_ROLE]=RESPONDER
  169. [PHP_SELF]=/ajaxEntryCenter.php
  170. [REQUEST_TIME_FLOAT]=1644889598.1507
  171. [REQUEST_TIME]=1644889598
  172. 09:46:38 [error]: 通用分页查询排序接口异常:数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,md5(3141592657)--' at line 1
  173. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889598 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select 1,md5(3141592657)--
  174. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,md5(3141592657)--' at line 1"]
  175. 异常发生在文件:[/bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php]的[53]行 code[0] !
  176. 异常堆栈上下文:
  177. #0 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once()
  178. #1 {main}
  179. 数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,md5(3141592657)--' at line 1
  180. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889598 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000' union select 1,md5(3141592657)--
  181. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' union select 1,md5(3141592657)--' at line 1"]
  182. 异常发生在文件:[/bizroot/approot/klywebapi/base/mysql.php]的[104]行 code[0] !
  183. 异常堆栈上下文:
  184. #0 /bizroot/approot/klywebapi/base/mysql.php(207): PdoUtil->errhandle()
  185. #1 /bizroot/approot/klywebapi/base/mysql.php(29): PdoUtil->fetchall()
  186. #2 /bizroot/approot/klywebapi/prjcenter/prjKLY/base/AboutActivity.php(1351): pdo_fetchall()
  187. #3 /bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php(25): bizbase_recruitAboutQuery()
  188. #4 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once('/bizroot/approo...')
  189. #5 {main}
  190. [上下文相关信息]:
  191. [WsAjaxBiz]=Public
  192. [WsAjaxPrj]=KLY
  193. [WsAjaxAction]=fetchPageData
  194. [ETK]=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  195. [USER]=nginxphp
  196. [HOME]=/home/nginxphp
  197. [HTTP_CONTENT_TYPE]=application/json
  198. [HTTP_REFERER]=https://api.kuailaiyou.top/
  199. [HTTP_USER_AGENT]=Tencent Security Team, more information: https://mmbizurl.cn/s/Wqsoj2SAz cc98
  200. [HTTP_ACCEPT]=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  201. [HTTP_CONTENT_LENGTH]=297
  202. [HTTP_TENCENT_LEAKSCAN]=TST(Tencent Security Team)
  203. [HTTP_COOKIE]=ETK=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  204. [HTTP_HOST]=api.kuailaiyou.top
  205. [REDIRECT_STATUS]=200
  206. [SERVER_NAME]=api.kuailaiyou.top
  207. [SERVER_PORT]=443
  208. [SERVER_ADDR]=172.18.217.149
  209. [REMOTE_PORT]=50220
  210. [REMOTE_ADDR]=106.55.202.118
  211. [SERVER_SOFTWARE]=nginx/1.20.1
  212. [GATEWAY_INTERFACE]=CGI/1.1
  213. [HTTPS]=on
  214. [REQUEST_SCHEME]=https
  215. [SERVER_PROTOCOL]=HTTP/1.1
  216. [DOCUMENT_ROOT]=/bizroot/approot/klywebapi
  217. [DOCUMENT_URI]=/ajaxEntryCenter.php
  218. [REQUEST_URI]=/ajaxEntryCenter.php?WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  219. [SCRIPT_NAME]=/ajaxEntryCenter.php
  220. [CONTENT_LENGTH]=297
  221. [CONTENT_TYPE]=application/json
  222. [REQUEST_METHOD]=POST
  223. [QUERY_STRING]=WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  224. [SCRIPT_FILENAME]=/bizroot/approot/klywebapi/ajaxEntryCenter.php
  225. [FCGI_ROLE]=RESPONDER
  226. [PHP_SELF]=/ajaxEntryCenter.php
  227. [REQUEST_TIME_FLOAT]=1644889598.1993
  228. [REQUEST_TIME]=1644889598
  229. 09:47:06 [error]: 通用分页查询排序接口异常:数据库执行异常:Undeclared variable: 1000JyI
  230. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889626 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000JyI=
  231. ["42000",1327,"Undeclared variable: 1000JyI"]
  232. 异常发生在文件:[/bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php]的[53]行 code[0] !
  233. 异常堆栈上下文:
  234. #0 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once()
  235. #1 {main}
  236. 数据库执行异常:Undeclared variable: 1000JyI
  237. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889626 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000JyI=
  238. ["42000",1327,"Undeclared variable: 1000JyI"]
  239. 异常发生在文件:[/bizroot/approot/klywebapi/base/mysql.php]的[104]行 code[0] !
  240. 异常堆栈上下文:
  241. #0 /bizroot/approot/klywebapi/base/mysql.php(207): PdoUtil->errhandle()
  242. #1 /bizroot/approot/klywebapi/base/mysql.php(29): PdoUtil->fetchall()
  243. #2 /bizroot/approot/klywebapi/prjcenter/prjKLY/base/AboutActivity.php(1351): pdo_fetchall()
  244. #3 /bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php(25): bizbase_recruitAboutQuery()
  245. #4 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once('/bizroot/approo...')
  246. #5 {main}
  247. [上下文相关信息]:
  248. [WsAjaxBiz]=Public
  249. [WsAjaxPrj]=KLY
  250. [WsAjaxAction]=fetchPageData
  251. [ETK]=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  252. [USER]=nginxphp
  253. [HOME]=/home/nginxphp
  254. [HTTP_CONTENT_TYPE]=application/json
  255. [HTTP_REFERER]=https://api.kuailaiyou.top/
  256. [HTTP_USER_AGENT]=Tencent Security Team, more information: https://mmbizurl.cn/s/Wqsoj2SAz cc98
  257. [HTTP_ACCEPT]=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  258. [HTTP_CONTENT_LENGTH]=266
  259. [HTTP_TENCENT_LEAKSCAN]=TST(Tencent Security Team)
  260. [HTTP_COOKIE]=ETK=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  261. [HTTP_HOST]=api.kuailaiyou.top
  262. [REDIRECT_STATUS]=200
  263. [SERVER_NAME]=api.kuailaiyou.top
  264. [SERVER_PORT]=443
  265. [SERVER_ADDR]=172.18.217.149
  266. [REMOTE_PORT]=50220
  267. [REMOTE_ADDR]=106.55.202.118
  268. [SERVER_SOFTWARE]=nginx/1.20.1
  269. [GATEWAY_INTERFACE]=CGI/1.1
  270. [HTTPS]=on
  271. [REQUEST_SCHEME]=https
  272. [SERVER_PROTOCOL]=HTTP/1.1
  273. [DOCUMENT_ROOT]=/bizroot/approot/klywebapi
  274. [DOCUMENT_URI]=/ajaxEntryCenter.php
  275. [REQUEST_URI]=/ajaxEntryCenter.php?WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  276. [SCRIPT_NAME]=/ajaxEntryCenter.php
  277. [CONTENT_LENGTH]=266
  278. [CONTENT_TYPE]=application/json
  279. [REQUEST_METHOD]=POST
  280. [QUERY_STRING]=WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  281. [SCRIPT_FILENAME]=/bizroot/approot/klywebapi/ajaxEntryCenter.php
  282. [FCGI_ROLE]=RESPONDER
  283. [PHP_SELF]=/ajaxEntryCenter.php
  284. [REQUEST_TIME_FLOAT]=1644889626.2206
  285. [REQUEST_TIME]=1644889626
  286. 09:47:43 [error]: 通用分页查询排序接口异常:数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '%bf%27%bf'%27%22'"\\%5C%0d%0a%23#' at line 1
  287. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889663 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000%bf%27%bf'%27%22'"\\%5C%0d%0a%23#
  288. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '%bf%27%bf'%27%22'\"\\\\%5C%0d%0a%23#' at line 1"]
  289. 异常发生在文件:[/bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php]的[53]行 code[0] !
  290. 异常堆栈上下文:
  291. #0 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once()
  292. #1 {main}
  293. 数据库执行异常:You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '%bf%27%bf'%27%22'"\\%5C%0d%0a%23#' at line 1
  294. sql语句: select btr.* ,round((btr.finish_datetime-:select_nowdate)/86400) as restdays ,bt.id as btid,bt.company_name,bt.catalog as bt_catalog,bt.certif_confirmed as bt_certif_confirmed ,bu.id as buid,bu.mobile bu_mobile ,concat(brd.id,'-',brd.begin_datetime,'-',brd.finish_datetime,'-',bt2.id,'-',bt2bu.id,'-',bt2bu.mobile,'-',bt2.true_name) as delegate_info ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=2 ) ) as now_worker_total ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 ) ) as now_worker_total000 ,(select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`=-1 or btdw.`status`=-3 ) ) as num_abnormal_total ,(st_distance_sphere(point(CAST(btr.work_addr_lng AS decimal(11,8)),CAST(btr.work_addr_lat AS decimal(11,8))),point(CAST(:nowlng AS decimal(11,8)),CAST(:nowlat AS decimal(11,8))))) as distance from biz_trader_recruit as btr left join biz_trader bt on bt.id=btr.biz_traderid left join base_user bu on bu.id=bt.base_userid left join biz_recruit_delegate brd on brd.biz_recruitid=btr.id and brd.finish_datetime>1644889663 left join biz_trader2 bt2 on bt2.id=brd.biz_trader2id left join base_user bt2bu on bt2bu.id=bt2.base_userid left join biz_worker_trace wktr on wktr.biz_workerid=0 and wktr.biz_catalog=0 and wktr.biz_id=btr.id where 1=1 and btr.`deleted`=0 and 1=1 and (btr.work_addr like concat('%',:qy_workCity,'%') ) and btr.`status`=2 and (select count(*) from biz_todowork btdw where btdw.biz_recruitid=btr.id and ( btdw.`status`>=1 or btdw.`status`=-1 or btdw.`status`=-3 ) ) <btr.need_total and ((btr.settle_catalog=0 and btr.begin_datetime>=:query_nowdate) or (btr.settle_catalog=1)) order by btr.istop desc,btr.id desc limit 0,1000%bf%27%bf'%27%22'"\\%5C%0d%0a%23#
  295. ["42000",1064,"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '%bf%27%bf'%27%22'\"\\\\%5C%0d%0a%23#' at line 1"]
  296. 异常发生在文件:[/bizroot/approot/klywebapi/base/mysql.php]的[104]行 code[0] !
  297. 异常堆栈上下文:
  298. #0 /bizroot/approot/klywebapi/base/mysql.php(207): PdoUtil->errhandle()
  299. #1 /bizroot/approot/klywebapi/base/mysql.php(29): PdoUtil->fetchall()
  300. #2 /bizroot/approot/klywebapi/prjcenter/prjKLY/base/AboutActivity.php(1351): pdo_fetchall()
  301. #3 /bizroot/approot/klywebapi/prjcenter/prjKLY/bizcenter/Public/fetchPageData.php(25): bizbase_recruitAboutQuery()
  302. #4 /bizroot/approot/klywebapi/ajaxEntryCenter.php(65): include_once('/bizroot/approo...')
  303. #5 {main}
  304. [上下文相关信息]:
  305. [WsAjaxBiz]=Public
  306. [WsAjaxPrj]=KLY
  307. [WsAjaxAction]=fetchPageData
  308. [ETK]=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  309. [USER]=nginxphp
  310. [HOME]=/home/nginxphp
  311. [HTTP_CONTENT_TYPE]=application/json
  312. [HTTP_REFERER]=https://api.kuailaiyou.top/
  313. [HTTP_USER_AGENT]=Tencent Security Team, more information: https://mmbizurl.cn/s/Wqsoj2SAz cc98
  314. [HTTP_ACCEPT]=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  315. [HTTP_CONTENT_LENGTH]=298
  316. [HTTP_TENCENT_LEAKSCAN]=TST(Tencent Security Team)
  317. [HTTP_COOKIE]=ETK=jyV9D-HNRabWSk7uUcpvLKUA2MF1bWFIsg4UWOb26z3RxDQ4OIHJfCjjtcobf9Zd9OstydmBledFOXArSgQsDQ__
  318. [HTTP_HOST]=api.kuailaiyou.top
  319. [REDIRECT_STATUS]=200
  320. [SERVER_NAME]=api.kuailaiyou.top
  321. [SERVER_PORT]=443
  322. [SERVER_ADDR]=172.18.217.149
  323. [REMOTE_PORT]=50220
  324. [REMOTE_ADDR]=106.55.202.118
  325. [SERVER_SOFTWARE]=nginx/1.20.1
  326. [GATEWAY_INTERFACE]=CGI/1.1
  327. [HTTPS]=on
  328. [REQUEST_SCHEME]=https
  329. [SERVER_PROTOCOL]=HTTP/1.1
  330. [DOCUMENT_ROOT]=/bizroot/approot/klywebapi
  331. [DOCUMENT_URI]=/ajaxEntryCenter.php
  332. [REQUEST_URI]=/ajaxEntryCenter.php?WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  333. [SCRIPT_NAME]=/ajaxEntryCenter.php
  334. [CONTENT_LENGTH]=298
  335. [CONTENT_TYPE]=application/json
  336. [REQUEST_METHOD]=POST
  337. [QUERY_STRING]=WsAjaxBiz=Public&WsAjaxPrj=KLY&WsAjaxAction=fetchPageData
  338. [SCRIPT_FILENAME]=/bizroot/approot/klywebapi/ajaxEntryCenter.php
  339. [FCGI_ROLE]=RESPONDER
  340. [PHP_SELF]=/ajaxEntryCenter.php
  341. [REQUEST_TIME_FLOAT]=1644889663.0254
  342. [REQUEST_TIME]=1644889663