fix

app/function.php

@@ -1533,7 +1533,7 @@ function write_upload_logs($filePath, $sourceName, $absolutePath, $fileSize, $fr
 
     // $name = trim(basename($filePath), " \t\n\r\0\x0B"); // 当前图片名称
     $log = array(basename($filePath) => array(             // 以上传图片名称为Array
-        'source'     => $sourceName,                       // 原始文件名称
+        'source'     => htmlspecialchars($sourceName),                       // 原始文件名称
         'date'       => date('Y-m-d H:i:s'),               // 上传日期
         'ip'         => real_ip(),                         // 上传IP
         'port'       => $_SERVER['REMOTE_PORT'],           // IP端口

app/info.php

@@ -93,7 +93,7 @@ if ($config['ad_top']) echo $config['ad_top_info'];
                 <?php if (is_who_login('admin')) : ?>
                     <tr class="text-primary">
                         <td>原始名称</td>
-                        <td><?php echo $logs[$logsName]['source']; ?></td>
+                        <td><?php echo htmlspecialchars($logs[$logsName]['source']); ?></td>
                     </tr>
                     <tr class="text-primary">
                         <td>原始大小</td>

app/upload.php

@@ -32,7 +32,7 @@ if (empty($_REQUEST['sign']) || $_REQUEST['sign'] !== date('YmdH')) {
     exit(json_encode(array(
         "result"  => "failed",
         "code"    => 403,
-        "message" => "签名错误,请刷新重试",
+        "message" => "上传签名错误,请刷新重试",
     )));
 }