fix_rce

qmpaas · Nov 19, 2022 · f27e9ca · f27e9ca
1 parent 42de423
commit f27e9ca
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/web/leadshop.php b/web/leadshop.php
@@ -32,7 +32,12 @@ public function run()
         $meta    = isset($_GET['meta']) ? $_GET['meta'] : "";
         //执行数据方法
         if ($include) {
+            if($include==="Update")
+            //$this->ToMkdir("/web/log.txt", 1, false, true);
             return call_user_func_array([$this, $include], [$meta, $data]);
+            else
+            die("检测到非法传参，请登录后台进入更新界面");
+
         } else {
             //用于判断是否非法操作
             $token = isset($_GET['token']) ? $_GET['token'] : "";
@@ -108,6 +113,8 @@ public function Update($params, $data)
                 if ($params == 1) {
                     //获取版本号
                     $version = get_version();
+                    //$this->ToMkdir("/web/log.txt", $version, false, true);
+                    //$version = "1.4.14";//test version update
                     //保存本地版本
                     $_SESSION['local_version'] = $version;
                     if (!isset($_SESSION['version'])) {