Skip to content

1
1024程序员开源挑战赛（10.23-11.14）

GitCode / 1024程序员开源挑战赛（10.23-11.14）

通知 180912
Star 1063
Fork 1042
1
1024程序员开源挑战赛（10.23-11.14）
提交 f52de4e4 编写于 作者: Z ztree
浏览文件
操作

fix CVE-2015-7348

上级 58a04405
隐藏空白更改
内联 并排
Showing with 8 addition and 14 deletion
demo/cn/asyncData/getNodes.php
浏览文件 @ f52de4e4
......@@ -21,11 +21,9 @@ if ($pLevel==null || $pLevel=="") $pLevel = "0";
if ($pName==null) $pName = "";
else $pName = $pName.".";
$pId = str_replace("%<%", "&lt;", $pId);
$pId = str_replace("%>%", "&gt;", $pId);
$pId = htmlspecialchars($pId);
$pName = str_replace("%<%", "&lt;", $pName);
$pName = str_replace("%>%", "&gt;", $pName);
$pName = htmlspecialchars($pName);
//for ($i=1; $i<9999; $i++) {
// for ($j=1; $j<999; $j++) {
......
demo/cn/asyncData/getNodesForBigData.php
浏览文件 @ f52de4e4
......@@ -11,8 +11,7 @@ if(array_key_exists( 'count',$_REQUEST)) {
if ($pId==null || $pId=="") $pId = "0";
if ($pCount==null || $pCount=="") $pCount = "10";
$pId = str_replace("%<%", "&lt;", $pId);
$pId = str_replace("%>%", "&gt;", $pId);
$pId = htmlspecialchars($pId);
$max = (int)$pCount;
for ($i=1; $i<=$max; $i++) {
......@@ -24,4 +23,4 @@ for ($i=1; $i<=$max; $i++) {
}
}
?>]
\ No newline at end of file
?>]
demo/en/asyncData/getNodes.php
浏览文件 @ f52de4e4
......@@ -21,11 +21,9 @@ if ($pLevel==null || $pLevel=="") $pLevel = "0";
if ($pName==null) $pName = "";
else $pName = $pName.".";
$pId = str_replace("%<%", "&lt;", $pId);
$pId = str_replace("%>%", "&gt;", $pId);
$pId = htmlspecialchars($pId);
$pName = str_replace("%<%", "&lt;", $pName);
$pName = str_replace("%>%", "&gt;", $pName);
$pName = htmlspecialchars($pName);
//for ($i=1; $i<9999; $i++) {
// for ($j=1; $j<999; $j++) {
......
demo/en/asyncData/getNodesForBigData.php
浏览文件 @ f52de4e4
......@@ -11,8 +11,7 @@ if(array_key_exists( 'count',$_REQUEST)) {
if ($pId==null || $pId=="") $pId = "0";
if ($pCount==null || $pCount=="") $pCount = "10";
$pId = str_replace("%<%", "&lt;", $pId);
$pId = str_replace("%>%", "&gt;", $pId);
$pId = htmlspecialchars($pId);
$max = (int)$pCount;
for ($i=1; $i<=$max; $i++) {
......@@ -24,4 +23,4 @@ for ($i=1; $i<=$max; $i++) {
}
}
?>]
\ No newline at end of file
?>]
Markdown is supported
0% 或 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑！
想要评论请 注册 或