wyk/juipphp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

过滤参数

Browse Source
This commit is contained in:
wanyongkang
2026-08-17 14:29:55 +08:00
parent 2887aee9bb
commit 07949057a1
2 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/http/controller/Order.php
View File

@@ -422,6 +422,7 @@ class Order extends Controller
'code'=>-8, 'code'=>-8,
'data' => '非法参数', 'data' => '非法参数',
'msg' => '请求后台失败，请联系客服！' 'msg' => '请求后台失败，请联系客服！'
// 'submsg' => $http_order_data->m
]; ];
return $info; return $info;
} else { } else {
@@ -473,4 +474,4 @@ class Order extends Controller
} }

14
fastphp/Fastphp.php
View File

@@ -67,6 +67,20 @@ class Fastphp
//删除前后的/ //删除前后的/
$url = trim($url, '/'); $url = trim($url, '/');
//处理提交过来的参数
foreach ($_GET as $get_data) {
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
}
foreach ($_POST as $get_data) {
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
}
if ($url) { if ($url) {
//使用 / 分割 //使用 / 分割
$urlArray = explode('/', $url); $urlArray = explode('/', $url);