!107 修复接口调用遗漏 addslashes

Merge pull request !107 from Coxxs/fix/uc_api
2017-08-21 10:54:44 +08:00 · 2017-08-21 10:54:44 +08:00 · 4e1fbd6dc2
parent 6eeff067aa
commit 4e1fbd6dc2
1 changed files with 1 additions and 1 deletions
--- a/upload/source/include/spacecp/spacecp_pm.php
+++ b/upload/source/include/spacecp/spacecp_pm.php
@ -376,7 +376,7 @@ if($_GET['op'] == 'checknewpm') {
 	}
 	$username = $_GET['username'];

-	if(!$username || !uc_get_user($username)) {
+	if(!$username || !uc_get_user(addslashes($username))) {
 		showmessage('pm_ignore_error_nopm');
 	}