diff --git a/config/filter.php b/config/filter.php index f692b30100..e884bb0177 100755 --- a/config/filter.php +++ b/config/filter.php @@ -11,7 +11,7 @@ $filter->rules->orderBy = '/^\w+_(desc|asc)$/i'; $filter->rules->browseType = '/^by\w+$/i'; $filter->rules->word = '/^\w+$/'; $filter->rules->paramName = '/^[a-zA-Z0-9_\.]+$/'; -$filter->rules->paramValue = '/^[a-zA-Z0-9=_,`#+:\^\\\\\/\.%\*\|\x7f-\xff\-]+$/'; +$filter->rules->paramValue = '/^[a-zA-Z0-9=_,`#+\^\/\.%\*\|\x7f-\xff\-]+$/'; $filter->default = new stdclass(); $filter->default->moduleName = 'code'; diff --git a/module/extension/control.php b/module/extension/control.php index 5777748684..c9c991ce67 100644 --- a/module/extension/control.php +++ b/module/extension/control.php @@ -388,7 +388,7 @@ class extension extends control */ public function safe(string $statusFile) { - $statusFile = str_replace('\\', '/', $statusFile); + $statusFile = str_replace('\\', '/', helper::safe64Decode($statusFile)); $this->view->error = sprintf($this->lang->extension->noticeOkFile, $statusFile, $statusFile); $this->view->title = $this->lang->extension->browse; $this->display(); diff --git a/module/extension/zen.php b/module/extension/zen.php index 1988fe465b..8e810a455e 100644 --- a/module/extension/zen.php +++ b/module/extension/zen.php @@ -22,7 +22,7 @@ class extensionZen extends extension { /* 判断是否要跳转到安全校验页面。 */ $statusFile = $this->loadModel('common')->checkSafeFile(); - if($statusFile) die($this->fetch('extension', 'safe', "statusFile=$statusFile")); + if($statusFile) die($this->fetch('extension', 'safe', 'statusFile=' . helper::safe64Encode($statusFile))); } /**