安全警告：MySql Error！

错误文件：/Rubber_Step.html
错误信息：You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'OR parentstr LIKE '%,,%') AND checkinfo=true AND delstate='' order by orderid as' at line 1 Error sql: SELECT * FROM `es_infoimg` WHERE (classid= OR parentstr LIKE '%,,%') AND checkinfo=true AND delstate='' order by orderid asc limit 0,8