wyk/juipphp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

添加过滤条件

Browse Source
This commit is contained in:
“wanyongkang”
2026-08-21 17:09:21 +08:00
parent 43d97c93cd
commit 4130ebe2c1
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
fastphp/Fastphp.php
View File

@@ -73,7 +73,7 @@ class Fastphp
unset($_GET['s']);
}
$get_data = json_encode($_GET).json_encode($_POST).file_get_contents("php://input");
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'DUMPFILE') !== false)||(stripos($get_data, 'EXECUTE') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'drop') !== false)||(stripos($get_data, 'grant') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
@@ -95,9 +95,11 @@ class Fastphp
//判断控制器和操作是否存在
$controller = 'app\\' . $controllerName;
if (!class_exists($controller)) {
die;
exit($controller . '控制器不存在！');
}
if (!method_exists($controller, $actionName)) {
die;
exit($actionName . '方法不存在！');
}