From e9816d75b2a955b08edcb037fb3cd912f320cf25 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9Cwanyongkang=E2=80=9D?= <“937888580@qq.com”>
Date: Mon, 17 Aug 2026 15:21:30 +0800
Subject: [PATCH] =?UTF-8?q?=E6=A3=80=E9=AA=8C=E6=8F=90=E4=BA=A4=E8=BF=87?=
 =?UTF-8?q?=E6=9D=A5=E7=9A=84=E6=95=B0=E6=8D=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 fastphp/Fastphp.php | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/fastphp/Fastphp.php b/fastphp/Fastphp.php
index 81918ca..7a24020 100644
--- a/fastphp/Fastphp.php
+++ b/fastphp/Fastphp.php
@@ -69,17 +69,10 @@ class Fastphp
 
 	
         //处理提交过来的参数
-
-        foreach ($_GET as $get_data) {
-            if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
-                die;
-            }
+        $get_data = json_encode($_GET).json_encode($_POST);
+        if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
+            die;
         }
-        foreach ($_POST as $get_data) {
-            if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
-                die;
-            }
-        }	
 
         if ($url) {
             //使用 / 分割