发布v2.5.5版本

2023-04-05 13:00:20 +08:00
parent bc69541c7b
commit 33ce4c6298
102 changed files with 570 additions and 280 deletions
--- a/webmain/task/api/uploadAction.php
+++ b/webmain/task/api/uploadAction.php
@@ -540,7 +540,7 @@ class uploadClassAction extends apiAction
 			$where = '`id` in(select `fileid` from `[Q]word` where `type`=0 '.$str.' )';
 		}
 		if($key){
-			$key = $this->jm->base64decode($key);
+			$key = $this->rock->xssrepstr($this->jm->base64decode($key));
 			$where.=" and `filename` like '%".$key."%'";
 		}
 		if($uptp && $uptp!='*'){