随风分类信息程序 v1.4 COOKIES 欺骗

admin/index.php：

require_once("../conn.php");?>

$user=cstr($_POST["user"]);
$pass=cstr($_POST["pass"]);
if($_GET["post"]=="action"){

$sql=mysql_query("select * from config where s_user='".$user."' and s_pass='".$pass."'");
$rs=mysql_fetch_array($sql);
if($rs["id"]==""){
echo "";
exit;
}else{
setcookie("admin","windows250523691",time()+3600);
echo "";
exit;
}
}