V1.0.6

ChangeLog.txt

-PbootCMS V1.0.5 build 2018-04-23
+PbootCMS V1.0.6 build 2018-04-24
+1、修复无任何内容执行排序报错；
+2、修复可能存在的跨站请求伪造漏洞；
+
+PbootCMS V1.0.5 build 2018-04-23
 1、新增后台配置项自动新增功能；
 2、修复logo不自适应多级目录路径；
 3、新增十类API调用，方便小程序、APP、Ajax等数据获取；

apps/admin/controller/content/ContentController.php

@@ -229,14 +229,18 @@ class ContentController extends Controller
             switch ($submit) {
                 case 'sorting': // 修改列表排序
                     $listall = post('listall');
-                    $sorting = post('sorting');
-                    foreach ($listall as $key => $value) {
-                        if ($sorting[$key] === '' || ! is_numeric($sorting[$key]))
-                            $sorting[$key] = 255;
-                        $this->model->modContent($value, "sorting=" . $sorting[$key]);
+                    if ($listall) {
+                        $sorting = post('sorting');
+                        foreach ($listall as $key => $value) {
+                            if ($sorting[$key] === '' || ! is_numeric($sorting[$key]))
+                                $sorting[$key] = 255;
+                            $this->model->modContent($value, "sorting=" . $sorting[$key]);
+                        }
+                        $this->log('修改内容排序成功！');
+                        success('修改成功！', - 1);
+                    } else {
+                        alert_back('排序失败，无任何内容！');
                     }
-                    $this->log('修改内容排序成功！');
-                    success('修改成功！', - 1);
                     break;
             }
             exit();

apps/admin/controller/content/ContentSortController.php

@@ -229,14 +229,18 @@ class ContentSortController extends Controller
             switch ($submit) {
                 case 'sorting': // 修改列表排序
                     $listall = post('listall');
-                    $sorting = post('sorting');
-                    foreach ($listall as $key => $value) {
-                        if ($sorting[$key] === '' || ! is_numeric($sorting[$key]))
-                            $sorting[$key] = 255;
-                        $this->model->modSortSorting($value, "sorting=" . $sorting[$key]);
+                    if ($listall) {
+                        $sorting = post('sorting');
+                        foreach ($listall as $key => $value) {
+                            if ($sorting[$key] === '' || ! is_numeric($sorting[$key]))
+                                $sorting[$key] = 255;
+                            $this->model->modSortSorting($value, "sorting=" . $sorting[$key]);
+                        }
+                        $this->log('批量修改栏目排序成功！');
+                        success('修改成功！', - 1);
+                    } else {
+                        alert_back('排序失败，无任何内容！');
                     }
-                    $this->log('批量修改栏目排序成功！');
-                    success('修改成功！', - 1);
                     break;
             }
             exit();

apps/common/version.php

 <?php
 return array(
     // 应用版本
-    'app_version' => '1.0.5'
+    'app_version' => '1.0.6'
 
 );
  
\ No newline at end of file