修复SelectPage排序安全问题

2026-03-23 21:14:40 +08:00 · 2026-03-23 21:14:40 +08:00 · dd32740c66
parent 3b02c0fbeb
commit dd32740c66
1 changed files with 1 additions and 1 deletions
--- a/application/common/controller/Backend.php
+++ b/application/common/controller/Backend.php
@ -552,7 +552,7 @@ class Backend extends Controller
                $primaryvalue = array_unique(is_array($primaryvalue) ? $primaryvalue : explode(',', $primaryvalue));
                //修复自定义data-primary-key为字符串内容时，给排序字段添加上引号
                $primaryvalue = array_map(function ($value) {
-                    return '\'' . $value . '\'';
+                    return \think\Db::quote($value);
                }, $primaryvalue);

                $primaryvalue = implode(',', $primaryvalue);