include/dialog/config.php, XSS©¶´ÐÞ¸´
member/inc/space_action.php, SQL×¢È멶´ÐÞ¸´