发布v2.5.5版本

webmain/task/api/indexreimAction.php

@@ -175,6 +175,7 @@ class indexreimClassAction extends apiAction
 		$arr['outunum']   = $this->option->getval('outunum'.$this->adminid.'');
 		$arr['outgroupopen']   = $this->option->getval('outgroupopen'.$this->adminid.'');
 		$arr['tonghuabo'] = getconfig('video_bool') ? '1' : '2';//是否开启音视频
+		$arr['lxrshow'] = ($this->option->getval('appsy_lxrshow')!='否') ? 1 : 2;
 		
 		$this->showreturn($arr);
 	}

webmain/task/api/loginAction.php

@@ -260,6 +260,7 @@ class loginClassAction extends apiAction
 		$mobile = $this->get('mobile');
 		if(!$openid || !$mobile)return returnerror('err');
 		$mobile = $this->jm->base64decode($mobile);
+		if(!c('check')->iscnmobile($mobile))return returnerror('err2');
 		$where  = "`mobile`='$mobile'";
 		if(m('admin')->rows($where)==0 && m('customer')->rows($where)==0 )return retuenerror('此手机号没在我们系统登记过');
 		$na =  getconfig('titleout');

webmain/task/api/uploadAction.php

@@ -540,7 +540,7 @@ class uploadClassAction extends apiAction
 			$where = '`id` in(select `fileid` from `[Q]word` where `type`=0 '.$str.' )';
 		}
 		if($key){
-			$key = $this->jm->base64decode($key);
+			$key = $this->rock->xssrepstr($this->jm->base64decode($key));
 			$where.=" and `filename` like '%".$key."%'";
 		}
 		if($uptp && $uptp!='*'){