修复回帖指定的逻辑漏洞

2017-07-27 11:05:39 +08:00 · 2017-07-27 11:05:39 +08:00 · 4bcb130e24
parent 16f973fd23
commit 4bcb130e24
1 changed files with 5 additions and 1 deletions
--- a/upload/source/include/topicadmin/topicadmin_stickreply.php
+++ b/upload/source/include/topicadmin/topicadmin_stickreply.php
@ -41,6 +41,10 @@ if(!submitcheck('modsubmit')) {

 	if($_GET['stickreply']) {
 		foreach($sticktopiclist as $pid => $postnum) {
+			$post = C::t('forum_post')->fetch_all_by_pid('tid:'.$_G['tid'], $pid, false);			
+			if($post[$pid]['tid'] != $_G['tid']) {
+				continue;
+			}
 			C::t('forum_poststick')->insert(array(
 				'tid' => $_G['tid'],
 				'pid' => $pid,