From 18b3f227e833418aae5c37ba30036fd2f870f853 Mon Sep 17 00:00:00 2001
From: liaofei <136327134@qq.com>
Date: Mon, 6 Jan 2020 15:05:34 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E8=BF=87=E6=BB=A4=E5=8F=82?=
 =?UTF-8?q?=E6=95=B0,=E9=98=B2=E6=AD=A2sql=E6=B3=A8=E5=85=A5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 crmeb/app/admin/controller/system/SystemDatabackup.php | 1 +
 crmeb/app/admin/view/agent/agent_manage/index.php      | 1 +
 crmeb/app/http/middleware/AllowOriginMiddleware.php    | 2 +-
 crmeb/crmeb/services/UploadService.php                 | 2 +-
 4 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/crmeb/app/admin/controller/system/SystemDatabackup.php b/crmeb/app/admin/controller/system/SystemDatabackup.php
index 05d906ac..c49d8756 100644
--- a/crmeb/app/admin/controller/system/SystemDatabackup.php
+++ b/crmeb/app/admin/controller/system/SystemDatabackup.php
@@ -32,6 +32,7 @@ class SystemDatabackup extends AuthController
             'level' => 5,
         );
         $this->DB = new Backup($config);
+        $this->request->filter(['htmlspecialchars', 'strip_tags', 'addslashes', 'trim']);
     }
 
     /**
diff --git a/crmeb/app/admin/view/agent/agent_manage/index.php b/crmeb/app/admin/view/agent/agent_manage/index.php
index b32a8d1f..136b8ab2 100644
--- a/crmeb/app/admin/view/agent/agent_manage/index.php
+++ b/crmeb/app/admin/view/agent/agent_manage/index.php
@@ -351,6 +351,7 @@
             },
             mounted:function () {
                 this.getBadge();
+                var that = this;
                 layList.laydate.render({
                     elem:this.$refs.date_time,
                     trigger:'click',
diff --git a/crmeb/app/http/middleware/AllowOriginMiddleware.php b/crmeb/app/http/middleware/AllowOriginMiddleware.php
index 9d96426f..5f076e93 100644
--- a/crmeb/app/http/middleware/AllowOriginMiddleware.php
+++ b/crmeb/app/http/middleware/AllowOriginMiddleware.php
@@ -52,7 +52,7 @@ class AllowOriginMiddleware implements MiddlewareInterface
         } else {
             $response = $next($request)->header($header);
         }
-
+        $request->filter(['htmlspecialchars', 'strip_tags', 'addslashes', 'trim']);
         return $response;
     }
 }
\ No newline at end of file
diff --git a/crmeb/crmeb/services/UploadService.php b/crmeb/crmeb/services/UploadService.php
index 58bdcfc5..e34f5c5b 100644
--- a/crmeb/crmeb/services/UploadService.php
+++ b/crmeb/crmeb/services/UploadService.php
@@ -417,7 +417,7 @@ class UploadService
         };
         $fileName = Filesystem::putFile($this->uploadPath, $file);
         if (!$fileName) return self::setError('图片上传失败!');
-        return self::successful(str_replace('\\', '/', $fileName));
+        return self::successful(str_replace('\\', '/', ($this->uploadPath ? $this->uploadPath . '/' : '') . $fileName));
     }
 
     /**