hitsword
/
fastadmin
mirror of https://gitee.com/karson/fastadmin.git
1
0
Fork 0
Code Issues Releases Wiki Activity

修复SelectPage排序安全问题

pull/525/head V1.6.2.20260323
Karson 2026-03-23 21:14:40 +08:00
parent 3b02c0fbeb
commit dd32740c66
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
application/common/controller/Backend.php
View File

@ -552,7 +552,7 @@ class Backend extends Controller
$primaryvalue = array_unique(is_array($primaryvalue) ? $primaryvalue : explode(',', $primaryvalue)); $primaryvalue = array_unique(is_array($primaryvalue) ? $primaryvalue : explode(',', $primaryvalue));
//修复自定义data-primary-key为字符串内容时，给排序字段添加上引号 //修复自定义data-primary-key为字符串内容时，给排序字段添加上引号
$primaryvalue = array_map(function ($value) { $primaryvalue = array_map(function ($value) {
return '\'' . $value . '\''; return \think\Db::quote($value);
}, $primaryvalue); }, $primaryvalue);
$primaryvalue = implode(',', $primaryvalue); $primaryvalue = implode(',', $primaryvalue);