wyk/juipphp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

检验提交过来的数据

Browse Source
This commit is contained in:
“wanyongkang”
2026-08-17 15:21:30 +08:00
parent 2f7ad00423
commit e9816d75b2
1 changed files with 3 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
fastphp/Fastphp.php
View File

@@ -69,16 +69,9 @@ class Fastphp
//处理提交过来的参数
foreach ($_GET as $get_data) {
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
}
foreach ($_POST as $get_data) {
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
$get_data = json_encode($_GET).json_encode($_POST);
if ((stripos($get_data, 'substring') !== false)||(stripos($get_data, 'TO_BASE64') !== false)||(stripos($get_data, 'insert') !== false)||(stripos($get_data, 'update') !== false)||(stripos($get_data, 'delete') !== false)||(stripos($get_data, 'select') !== false)||(stripos($get_data, 'alert') !== false)||(stripos($get_data, 'UNION') !== false)||(stripos($get_data, 'OUTFILE') !== false)) {
die;
}
if ($url) {