安全更新

balzac233 · Jan 14, 2017 · 49fe140 · 49fe140
1 parent 3b7080f
commit 49fe140
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Application/Home/Controller/ItemController.class.php b/Application/Home/Controller/ItemController.class.php
@@ -56,7 +56,7 @@ public function add(){
             $item_type = I("item_type");
 
             if ($item_domain) {
-                $item = D("Item")->where("item_domain = '$item_domain' and item_id !='$item_id' ")->find();
+                $item = D("Item")->where("item_domain = '%s' and item_id !='%s' ",array($item_domain,$item_id))->find();
                 if ($item) {
                     //个性域名已经存在
                     $this->message(L('domain_already_exists'));