diff --git a/.example.env b/.example.env index ee1d0bbe..eac97f0b 100644 --- a/.example.env +++ b/.example.env @@ -1 +1,42 @@ -APP_DEBUG=true [APP] DEFAULT_TIMEZONE=Asia/Shanghai [DATABASE] TYPE=mysql HOSTNAME=host.docker.internal DATABASE=easyadmin USERNAME=root PASSWORD=root HOSTPORT=3306 CHARSET=utf8 DEBUG=true PREFIX=ea_ [LANG] default_lang=zh-cn # 后台配置项组 [EASYADMIN] # 后台地址后缀名称 ADMIN=admin # 后台登录验证码开关 CAPTCHA=true # 是否为演示环境 IS_DEMO=true # CDN配置项组 CDN= EXAMPLE=true # 是否开启CSRF过滤 IS_CSRF=true # 静态文件路径前缀 STATIC_PATH=/static # OSS静态文件路径前缀 OSS_STATIC_PREFIX=static_easyadmin \ No newline at end of file +APP_DEBUG=true + +[APP] +DEFAULT_TIMEZONE=Asia/Shanghai + +[DATABASE] +TYPE=mysql +HOSTNAME=host.docker.internal +DATABASE=easyadmin +USERNAME=root +PASSWORD=root +HOSTPORT=3306 +CHARSET=utf8 +DEBUG=true +PREFIX=ea_ + +[LANG] +default_lang=zh-cn + +# 后台配置项组 +[EASYADMIN] +# 后台地址后缀名称 +ADMIN=admin + +# 后台登录验证码开关 +CAPTCHA=true + +# 是否为演示环境 +IS_DEMO=true + +# CDN配置项组 +CDN= +EXAMPLE=true + +# 是否开启CSRF过滤 +IS_CSRF=true + +# 静态文件路径前缀 +STATIC_PATH=/static + +# OSS静态文件路径前缀 +OSS_STATIC_PREFIX=static_easyadmin diff --git a/app/admin/middleware/CsrfMiddleware.php b/app/admin/middleware/CsrfMiddleware.php index 6ba1aed4..b61d4ee6 100644 --- a/app/admin/middleware/CsrfMiddleware.php +++ b/app/admin/middleware/CsrfMiddleware.php @@ -31,7 +31,7 @@ public function handle(Request $request, \Closure $next) // 跨域校验 $refererUrl = $request->header('REFERER', null); $refererInfo = parse_url($refererUrl); - $host = $request->host(); + $host = $request->host(true); if (!isset($refererInfo['host']) || $refererInfo['host'] != $host) { $this->error('当前请求不合法!'); } @@ -50,4 +50,4 @@ public function handle(Request $request, \Closure $next) } return $next($request); } -} \ No newline at end of file +}