添加输入过滤，修正id传递的BUG

easychen · Feb 25, 2018 · 83829f8 · 83829f8
1 parent 1881398
commit 83829f8
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/data/web/resume_detail.php b/data/web/resume_detail.php
@@ -1,6 +1,6 @@
 <?php
 
-$id = intval( $_REQUEST );
+$id = intval( $_REQUEST['id'] );
 if( $id < 1 ) die("错误的简历ID");
 
 try

diff --git a/data/web/resume_modify.php b/data/web/resume_modify.php
@@ -6,7 +6,7 @@
     die("请先<a href='user_login.php'>登入</a>再添加简历"); 
 }
 
-$id = intval( $_REQUEST );
+$id = intval( $_REQUEST['id'] );
 if( $id < 1 ) die("错误的简历ID");
 
 try

diff --git a/data/web/resume_save.php b/data/web/resume_save.php
@@ -11,7 +11,7 @@
 
 // 获取输入参数
 $title = trim( $_REQUEST['title'] );
-$content = trim( $_REQUEST['content'] );
+$content = strip_tags( trim( $_REQUEST['content'] ));
 
 // 参数检查
 if( strlen( $title ) < 1 ) die("简历名称不能为空");

diff --git a/data/web/resume_update.php b/data/web/resume_update.php
@@ -12,7 +12,7 @@
 // 获取输入参数
 $id = intval( $_REQUEST['id'] );
 $title = trim( $_REQUEST['title'] );
-$content = trim( $_REQUEST['content'] );
+$content = strip_tags( trim( $_REQUEST['content'] ));
 
 // 参数检查
 if( strlen( $id ) < 1 ) die("简历ID不能为空");