知识付费前台SQL注入问题修复

admin

漏洞定位：/index.php/wap/public_api/get_cid_article



问题修复：修复文件application/wap/model/wap/ArticleCategory

1. public static function cidByArticleList($cid = 0, $first = 0, $limit = 0, $field = '*')
   
2. {
   
3.     $model = Db::name('article');
   
4.     if ((int)$cid > 0) {
   
5.         $model = $model->where('cid', (int)$cid);
   
6.     }
   
7.     return $model->field($field)->where('status', 1)->where('hide', 0)->order('sort DESC,add_time DESC')->limit($first, $limit)->select();
   
8. }

复制代码

test

11111111111111111111111