ECSHOP /api/client/includes/lib_api.php

function API_UserLogin($post)
{
    /* SQL注入过滤 */
    if (get_magic_quotes_gpc()) 
    {     
        $post[‘UserId‘] = $post[‘UserId‘]     
    } 
    else 
    {     
        $post[‘UserId‘] = addslashes($post[‘UserId‘]);     
    }
    /* end */
    $post[‘username‘] = isset($post[‘UserId‘]) ? trim($post[‘UserId‘]) : ‘‘;