include/dedesql.class.php, 变量覆盖漏洞