Version 3.3.7

去除addslashes转义(无sql),确保UI显示的是非转义的结果
This commit is contained in:
firesun
2016-02-03 21:49:16 +08:00
parent 3cb52ed6e2
commit 1669079625
4 changed files with 48 additions and 14 deletions

View File

@@ -48,7 +48,7 @@ function isKeepSession($info) {
function stripStr($str) {
if (get_magic_quotes_gpc())
$str = stripslashes($str);
return addslashes(htmlspecialchars($str, ENT_QUOTES, 'UTF-8'));
return htmlspecialchars($str, ENT_QUOTES, 'UTF-8');
}
function stripArr($arr) {
@@ -121,7 +121,7 @@ function decrypt($info) {
return $info;
}
//基于Discuz X3.1 function_misc.php
//基于Discuz X3.1 function_misc.php 函数已过滤,可直接输出
function convertip($ip, $ipdatafile) {
$ipaddr = '未知';
if (preg_match("/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/", $ip)) {