github/CRMEB
1
0
Fork 0
mirror of https://github.com/crmeb/CRMEB.git synced 2026-10-31 06:50:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

修复SQL注入

Browse Source
This commit is contained in:
FeiLiao 2024-01-12 18:48:53 +08:00
parent 20352cc696
commit cca42c6e5c
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
crmeb/app/dao/product/product/StoreProductDao.php
View File

@ -126,6 +126,7 @@ class StoreProductDao extends BaseDao
})->field('product_id')->select();
});
})->when(isset($where['coupon_category_id']) && $where['coupon_category_id'] != '', function ($query) use ($where) {
$where['coupon_category_id'] = stringToIntArray($where['coupon_category_id']);
$query->whereIn('id', function ($query) use ($where) {
$query->name('store_product_cate')->whereIn('cate_id', function ($query) use ($where) {
$query->name('store_category')->whereIn('pid', $where['coupon_category_id'])->field('id')->select();