no commit message

2023-12-21 21:15:19 +08:00
parent ad77fdd196
commit 7eaf20c8fd
28 changed files with 187 additions and 53 deletions
--- a/webmain/task/api/uploadAction.php
+++ b/webmain/task/api/uploadAction.php
@@ -476,6 +476,7 @@ class uploadClassAction extends apiAction
 	{
 		$data = array();
 		$fenlei = $this->jm->base64decode($this->get('fenlei'));
+		$fenlei = $this->rock->xssrepstr($this->rock->iconvsql($fenlei));
 		$where 	= m('admin')->getjoinstr('a.`receid`', $this->adminid, 1);
 		$sql 	= 'select a.`name`,a.`wtype`,b.`filepath`,b.`id` from `[Q]wordxie` a left join `[Q]file` b on a.`fileid`=b.`id` where a.`fenlei`=\''.$fenlei.'\' and a.`isgk`=1 and ('.$where.')';
 		$rows 	= $this->db->getall($sql);