diff --git a/application/admin/controller/Ajax.php b/application/admin/controller/Ajax.php index a1626c4686e8eca877d1378eb91958f1a3c94417..9d44c028c9bc674073f3c08939a7bbe6c4690fc2 100644 --- a/application/admin/controller/Ajax.php +++ b/application/admin/controller/Ajax.php @@ -50,7 +50,7 @@ class Ajax extends Backend $controllername = $this->request->get('controllername'); $lang = $this->request->get('lang'); - if (!$lang || !in_array($lang, config('allow_lang_list')) || !$controllername || !preg_match("/^[a-z0-9\.]+$/i", $controllername)) { + if (!$lang || !in_array($lang, config('allow_lang_list')) || !$controllername || !preg_match("/^[a-z0-9\.\_]+$/i", $controllername)) { return jsonp(['errmsg' => '参数错误'], 200, [], ['json_encode_param' => JSON_FORCE_OBJECT | JSON_UNESCAPED_UNICODE]); } diff --git a/application/index/controller/Ajax.php b/application/index/controller/Ajax.php index 3e1f24a134a9c2ad6a00b1d845ef7c98eab40d14..333e331b22bc3287e857a80e833ef748a72b2465 100644 --- a/application/index/controller/Ajax.php +++ b/application/index/controller/Ajax.php @@ -34,7 +34,7 @@ class Ajax extends Frontend $controllername = $this->request->get('controllername'); $lang = $this->request->get('lang'); - if (!$lang || !in_array($lang, config('allow_lang_list')) || !$controllername || !preg_match("/^[a-z0-9\.]+$/i", $controllername)) { + if (!$lang || !in_array($lang, config('allow_lang_list')) || !$controllername || !preg_match("/^[a-z0-9\.\_]+$/i", $controllername)) { return jsonp(['errmsg' => '参数错误'], 200, [], ['json_encode_param' => JSON_FORCE_OBJECT | JSON_UNESCAPED_UNICODE]); }