iSharkFly-Open
/
DiscuzX
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

修复 短消息忽略细节优化并修复漏洞

This commit is contained in:
Discuz! 2017-02-06 16:01:34 +08:00
parent dc4de03757
commit a7974f1519
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
upload/source/include/spacecp/spacecp_pm.php
View File

@ -375,7 +375,8 @@ if($_GET['op'] == 'checknewpm') {
showmessage('operating_too_fast', '', array('waittime' => $waittime), array('return' => true));
}
$username = $_GET['username'];
if(!$username) {
if(!$username || !uc_get_user($username)) {
showmessage('pm_ignore_error_nopm');
}

2
upload/template/default/home/spacecp_pm.htm
View File

@ -123,7 +123,7 @@
<!--{if $_G[inajax]}--><span><a href="javascript:;" onclick="hideWindow('$_GET[handlekey]');" class="flbc" title="{lang close}">{lang close}</a></span><!--{/if}-->
</h3>
<div id="$plid">
<form id="pmignoreform_{$plid}" name="pmignoreform_{$plid}" method="post" autocomplete="off" action="home.php?mod=spacecp&ac=pm&op=pm_ignore&plid=$plid&username=$username" {if $_G[inajax]}onsubmit="ajaxpost(this.id, 'return_$_GET[handlekey]');"{/if}>
<form id="pmignoreform_{$plid}" name="pmignoreform_{$plid}" method="post" autocomplete="off" action="home.php?mod=spacecp&ac=pm&op=pm_ignore&plid=$plid&username={echo urlencode($username)}" {if $_G[inajax]}onsubmit="ajaxpost(this.id, 'return_$_GET[handlekey]');"{/if}>
<!--{if $_G[inajax]}--><input type="hidden" name="handlekey" value="$_GET[handlekey]" /><!--{/if}-->
<input type="hidden" name="referer" value="{echo dreferer()}" />
<input type="hidden" name="pmignoresubmit" value="true" />