From 4130ebe2c1689e634261c112ff8fb1b740632c0d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9Cwanyongkang=E2=80=9D?= <“937888580@qq.com”>
Date: Fri, 21 Aug 2026 17:09:21 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=E8=BF=87=E6=BB=A4=E6=9D=A1?=
 =?UTF-8?q?=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 fastphp/Fastphp.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/fastphp/Fastphp.php b/fastphp/Fastphp.php
index c369f90..c1697a6 100644
--- a/fastphp/Fastphp.php
+++ b/fastphp/Fastphp.php
@@ -73,7 +73,7 @@ class Fastphp
             unset($_GET['s']);
         }
         $get_data = json_encode($_GET).json_encode($_POST).file_get_contents("php://input");
-        if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
+        if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'DUMPFILE') !== false)||(stripos($get_data, 'EXECUTE') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'drop') !== false)||(stripos($get_data, 'grant') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
             die;
         }
 
@@ -95,9 +95,11 @@ class Fastphp
         //判断控制器和操作是否存在
         $controller = 'app\\' . $controllerName;
         if (!class_exists($controller)) {
+            die;
             exit($controller . '控制器不存在！');
         }
         if (!method_exists($controller, $actionName)) {
+            die;
             exit($actionName . '方法不存在！');
         }