AMP是否存在被注入风险?解决方法

    public function _query($sql) 
    {
        global $Config;
        if(!$this -> MysqlConnect) Return false;
        $this -> QueryStatus = '(0)';
        $this -> Affected = 0;
        if($Config['DebugSql']) $this -> SqlBug .= "\n". '' . "\n";
        $result = mysql_query($sql, $this -> MysqlConnect);
        if (!$result) Return false;
        $this -> Affected = mysql_affected_rows();
        $this -> QueryStatus = '(ok)';
        Return $result;
    }