3.1.3 - 严重 - 未处理
例如：$hitsDb = M("Hits");
$data = array();
$data['catid'] = $tocatid;
$data['hitsid'] = array('exp',"replace(hitsid,'c-{$catids}-','c-{$tocatid}-')");
$hitsDb->where(array("catid"=>$catids))->save($data);其他的参数咱们先不看，来看看最终的SQL是啥：UPDATE `tp_hits` SET `catid`=3,`hitsid`=replace(hitsid,\'c-2-\',\'c-3-\') WHERE ( `catid` = 2 )看到replace那里了吧。。。加了反斜杠了-__,-!！！！！造成原来对的变成错了！ 