diff --git a/upload/source/admincp/admincp_setting.php b/upload/source/admincp/admincp_setting.php index 10db4bb02f67c7ad4ccc99ec874db7a4f9995e42..59a672fa99f63b16df08b2e4edd06f4d9bf3ee96 100644 --- a/upload/source/admincp/admincp_setting.php +++ b/upload/source/admincp/admincp_setting.php @@ -2632,6 +2632,10 @@ EOT; $ucdbpassnew = $settingnew['uc']['dbpass'] == '********' ? addslashes(UC_DBPW) : addslashes($settingnew['uc']['dbpass']); $settingnew['uc']['key'] = addslashes($settingnew['uc']['key'] == '********' ? addslashes(UC_KEY) : $settingnew['uc']['key']); + if(!is_numeric($settingnew['uc']['appid'])) { + cpmsg('uc_config_appid_error', '', 'error'); + } + if(function_exists("mysql_connect") && ini_get("mysql.allow_local_infile")=="1" && constant("UC_DBHOST") != $settingnew['uc']['dbhost']){ cpmsg('uc_config_load_data_local_infile_error', '', 'error'); } diff --git a/upload/source/language/lang_admincp_msg.php b/upload/source/language/lang_admincp_msg.php index f4d111b2c62eb8e099d1945d1929837aa65b98af..08df2bded13ba8ae180768ac0a116587811b231b 100644 --- a/upload/source/language/lang_admincp_msg.php +++ b/upload/source/language/lang_admincp_msg.php @@ -450,6 +450,7 @@ $lang = array ( 'setting_extcredits_must_available' => '您需要开启至少一种扩展积分', 'uc_database_connect_error' => '连接用户中心数据库服务器失败检查设置', 'uc_config_write_error' => '配置文件写入失败,请检查设置', + 'uc_config_appid_error' => 'UCenter 应用 ID 必须为数字,请检查设置', 'uc_config_load_data_local_infile_error' => '服务器开启了 MySQL LOAD DATA LOCAL IN FILE 功能,为避免可能发生的安全威胁,不允许在线编辑 UCenter 数据库服务器地址,如需修改请编辑 config/config_ucenter.php 内 UC_DBHOST 常量', 'setting_ipaccess_invalid' => '操作错误!您必须将自己的 IP 加入到允许访问站点的 IP 列表中', 'setting_adminipaccess_invalid' => '操作错误!您必须将自己的 IP 加入到允许访问后台的 IP 列表中', diff --git a/upload/uc_client/model/base.php b/upload/uc_client/model/base.php index 3e47deeadfd44f5b6acb01de3eea129e314b0bf3..0ad00e76e4c2d048316100440588ca3e86422494 100644 --- a/upload/uc_client/model/base.php +++ b/upload/uc_client/model/base.php @@ -203,6 +203,9 @@ class base { } function note_exists() { + if(!is_numeric(constant("UC_APPID"))) { + return NULL; + } $noteexists = $this->db->result_first("SELECT value FROM ".UC_DBTABLEPRE."vars WHERE name='noteexists".UC_APPID."'"); if(empty($noteexists)) { return FALSE; diff --git a/upload/uc_client/model/note.php b/upload/uc_client/model/note.php index 1b3767446550347c81e7e4e67670bf7061a7c937..871a83bbd22a7e9c66b15264971e1d1f3902610a 100644 --- a/upload/uc_client/model/note.php +++ b/upload/uc_client/model/note.php @@ -94,6 +94,9 @@ class notemodel { function _send() { + if(!is_numeric(constant("UC_APPID"))) { + return NULL; + } $note = $this->_get_note(); if(empty($note)) { @@ -153,6 +156,9 @@ class notemodel { } function _get_note() { + if(!is_numeric(constant("UC_APPID"))) { + return NULL; + } $app_field = 'app'.UC_APPID; $data = $this->db->fetch_first("SELECT * FROM ".UC_DBTABLEPRE."notelist WHERE closed='0' AND $app_field<'1' AND $app_field>'-".UC_NOTE_REPEAT."' LIMIT 1"); return $data;