bozhihouc/SRCMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SRCMS V2.3

Browse Source 
[修复] 后台处理订单提示“非法请求”
[修复] 用户前台无法调整商品兑换数量
[修复] 一处第三方组件造成的SSRF
This commit is contained in:
Martin Zhou
2017-09-09 12:06:21 +08:00
parent e5a0c1987f
commit fff056a9b1
16 changed files with 176 additions and 69 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
Application/Admin/Controller/OrderController.class.php
View File

@@ -39,14 +39,13 @@ class OrderController extends BaseController
public function update()
{
$id = I('get.id',0,'intval');
$user_id = I('get.username',0,'intval');
if (!IS_POST) {
$model = M('order')->where(array('id='=>$id))->find();
$id = I('get.id',0,'intval');
//$user_id = I('get.userid',0,'intval');
$model = M('order')->where(array('id'=>$id))->find();
$this->assign('model',$model);
$model = M('member');
$info = $model->where(array('id'=>$user_id))-> select();
$this->assign('userM', $info);
//$info = M('member')->where(array('id'=>$user_id))-> select();
//$this->assign('userM', $info);
$this->display();
}
if (IS_POST) {