From 41341bb9f5b6e4bc3acd565c1138ae2d47ef35f4 Mon Sep 17 00:00:00 2001 From: wangyidong Date: Wed, 7 Dec 2016 17:22:28 +0800 Subject: [PATCH] * adjust for safe. --- framework/base/router.class.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/framework/base/router.class.php b/framework/base/router.class.php index 5818dd8422..4605cac21e 100644 --- a/framework/base/router.class.php +++ b/framework/base/router.class.php @@ -1216,8 +1216,9 @@ class baseRouter */ public function setModuleName($moduleName = '') { + $moduleName = strip_tags(urldecode(strtolower($moduleName))); if(!preg_match('/^[a-zA-Z0-9]+$/', $moduleName)) $this->triggerError("The modulename '$moduleName' illegal. ", __FILE__, __LINE__, $exit = true); - $this->moduleName = strip_tags(urldecode(strtolower($moduleName))); + $this->moduleName = $moduleName; } /** @@ -1250,8 +1251,9 @@ class baseRouter */ public function setMethodName($methodName = '') { + $methodName = strip_tags(urldecode(strtolower($methodName))); if(!preg_match('/^[a-zA-Z0-9]+$/', $methodName)) $this->triggerError("The methodname '$methodName' illegal. ", __FILE__, __LINE__, $exit = true); - $this->methodName = strip_tags(urldecode(strtolower($methodName))); + $this->methodName = $methodName; } /**