save

2022-12-08 19:47:02 +08:00 · 2022-12-08 19:47:02 +08:00 · a8abbb32de
commit a8abbb32de
parent 25bd1f9b50
1 changed files with 3 additions and 0 deletions
--- a/src/plugin/admin/app/controller/TableController.php
+++ b/src/plugin/admin/app/controller/TableController.php
@ -437,6 +437,9 @@ class TableController extends Base

        $explode = explode('/', trim(strtolower($controller_path), '/'));
        $plugin = '';
+        if (strpos($controller_path, '/controller/') === false) {
+            return $this->json(2, '控制器必须在controller目录下');
+        }
        if ($explode[0] === 'plugin') {
            if (count($explode) < 4) {
                return $this->json(2, '控制器参数非法');