php - Pseudo-static injection, what does the * sign at the end of the SQL mean?

Question

stop 2017-06-21 15:12:09
SQL injection point:
http://xxxxxxxxxxxxxx/index.php/Home/Gallery/gallery/cid/6
Pseudo-static injection, just add an * sign at the end of the SQL

The security center reported this problem to me. What is the cause and how to fix it? Thank you
thinkphp3.2.3

Answer 1

Where is the injection in your question? ? ?