wyk/juipphp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

过滤参数

Browse Source
This commit is contained in:
wanyongkang
2026-08-17 14:29:55 +08:00
parent 2887aee9bb
commit 07949057a1
2 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
fastphp/Fastphp.php
View File

@@ -67,6 +67,20 @@ class Fastphp
//删除前后的/
$url = trim($url, '/');
//处理提交过来的参数
foreach ($_GET as $get_data) {
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
}
foreach ($_POST as $get_data) {
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
}
if ($url) {
//使用 / 分割
$urlArray = explode('/', $url);