diff --git a/README.md b/README.md
index 7f379b1..0a28e61 100755
--- a/README.md
+++ b/README.md
@@ -106,6 +106,7 @@ $HTTP["url"] =~ "^/(i|public)/" {
 * 2022-2-13 v2.5.1
 - 异步执行鉴黄
 - 取消检测imagick扩展
+- 修复一处暴露路径bug
 - 修复可能导致检测弹窗弹出失败
 
 * 2022-2-7 v2.5.0
diff --git a/admin/admin.inc.php b/admin/admin.inc.php
index 2f599a9..f5b24f6 100755
--- a/admin/admin.inc.php
+++ b/admin/admin.inc.php
@@ -23,7 +23,7 @@ if (!is_who_login('admin')) {
 }
 
 // 修改config配置
-if (isset($_POST['form'])) {
+if (isset($_POST['update'])) {
     $postArr = $_POST;
     $new_config = array_replace($config, $postArr);
     $config_file = APP_ROOT . '/config/config.php';
@@ -208,7 +208,7 @@ if (isset($_GET['reimg'])) {
                         </div>
                     </div>
                     <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     </div>
                     <button type="submit" class="btn btn-primary">保存</button>
                 </form>
@@ -375,7 +375,7 @@ if (isset($_GET['reimg'])) {
                         <input type="range" class="form-control" name="compress_ratio" value="<?php echo $config['compress_ratio']; ?>" min="1" max="100" step="1" onchange="document.getElementById('compress_ratio').innerHTML=value">
                     </div>
                     <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     </div>
                     <button type="submit" class="btn btn-primary">保存</button>
                 </form>
@@ -405,7 +405,7 @@ if (isset($_GET['reimg'])) {
                         <textarea class="form-control" rows="5" name="ad_bot_info"><?php echo $config['ad_bot_info']; ?></textarea>
                     </div>
                     <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     </div>
                     <button type="submit" class="btn btn-primary">保存</button>
                 </form>
@@ -459,7 +459,7 @@ if (isset($_GET['reimg'])) {
                     <div class="form-group">
                         <label for="TinyPng" data-toggle="tooltip" title="申请网址"><a href="https://tinypng.com/developers" target="_blank">TinyPng Key &nbsp;</a></label>
                         <input type="text" class="form-control input-sm" id="TinyPng" name="TinyPng_key" value="<?php echo $config['TinyPng_key']; ?>" placeholder="填入压缩图片Key" data-toggle="tooltip" title="开启后会受服务器到https://tinypng.com 速度影响,国内不建议开启!" onkeyup="this.value=this.value.replace(/\s/g,'')">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     </div>
                     <div class="form-group">
                         <label for="moderatecontent_key" data-toggle="tooltip" title="申请网址"><a href="https://client.moderatecontent.com" target="_blank">Moderate Key</a></label>
@@ -469,7 +469,7 @@ if (isset($_GET['reimg'])) {
                         <label for="nsfwjs_url" data-toggle="tooltip" title="nsfwjs github"><a href="https://github.com/infinitered/nsfwjs" target="_blank">nsfwjs url &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a></label>
                         <input type="url" class="form-control input-sm" name="nsfwjs_url" id="nsfwjs_url" value="<?php echo $config['nsfwjs_url']; ?>" placeholder="http://ip:3307/nsfw?url=" data-toggle="tooltip" title="自行搭建nsfwjs服务的网站地址" onkeyup="this.value=this.value.replace(/\s/g,'')">
                     </div>
-                    <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                    <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     <button type="submit" class="btn btn-mini btn-primary">保存</button>
                 </form>
                 <b data-toggle="tooltip" title="新Token需按要求填入/config/api_key.php才生效">生成新的API upload Token</b>
@@ -546,7 +546,7 @@ if (isset($_GET['reimg'])) {
                         </div>
                     </div>
                     <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     </div>
                     <button type="submit" class="btn btn-primary">保存</button>
                 </form>
@@ -726,7 +726,7 @@ if (isset($_GET['reimg'])) {
                         <input type="range" class="form-control" name="listNumber" value="<?php echo $config['listNumber']; ?>" min="10" max="100" step="10" onchange="document.getElementById('listNumber').innerHTML=value" data-toggle="tooltip" title="可在网址后填写参数实时更改预览数量 如: https://png.cm/application/list.php?num=3">
                     </div>
                     <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     </div>
                     <button type="submit" class="btn btn-primary">保存</button>
                 </form>
@@ -746,7 +746,7 @@ if (isset($_GET['reimg'])) {
                         </div>
                     </div>
                     <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                     </div>
                     <button type="submit" class="btn btn btn-primary">更改管理 账号/密码</button>
                     <div class="alert alert-primary with-icon col-xs-8" style="margin-top: 5px;">
diff --git a/application/footer.php b/application/footer.php
index 17aec23..f503cd3 100755
--- a/application/footer.php
+++ b/application/footer.php
@@ -1,4 +1,6 @@
-<?php if ($config['ad_bot']) echo $config['ad_bot_info']; // 底部广告 
+<?php
+defined('APP_ROOT') ?: exit; // 禁止访问
+if ($config['ad_bot']) echo $config['ad_bot_info']; // 底部广告 
 ?>
 <footer class="text-muted small col-md-12" style="text-align: center;">
   <hr>
diff --git a/application/header.php b/application/header.php
index 3fe4e45..83037e3 100755
--- a/application/header.php
+++ b/application/header.php
@@ -1,6 +1,4 @@
-<?php
-require_once __DIR__ . '/function.php';
-?>
+<?php require_once __DIR__ . '/function.php'; ?>
 <!DOCTYPE html>
 <html lang="zh-cn">
 
diff --git a/config/config.php b/config/config.php
index 3e93607..df4b8bc 100755
--- a/config/config.php
+++ b/config/config.php
@@ -4,8 +4,8 @@ $config=Array
 	'title'=>'简单图床 - EasyImage',
 	'keywords'=>'简单图床,easyimage,无数据库图床,PHP多图长传程序,自适应页面,HTML5,markdown,bbscode,一键复制',
 	'description'=>'简单图床EasyImage是一款支持多文件上传的无数据库图床,可以完美替代PHP多图上传程序，最新html5自适应页面兼容手机电脑，上传后返回图片直链，markdown图片，论坛贴图bbscode链接，简单方便支持一键复制，支持多域名，api上传。',
-	'tips'=>'<a><li class="icon icon-bullhorn text-muted"> 单文件≤10M，单次上传≤30张</li></a>
-<a href="https://github.com/icret/EasyImages2.0" target="_black"><i class="icon icon-heart"> 简单图床是一款开源图床, 支持多文件上传无数据库</i></a>
+	'tips'=>'<a><li class="icon icon-bullhorn text-muted"> 单文件≤10M，单次上传≤30张</li></a>
+<a href="https://github.com/icret/EasyImages2.0" target="_black"><i class="icon icon-heart"> 简单图床是一款开源图床, 支持多文件上传无数据库</i></a>
 <a href="https://github.com/icret/EasyImages2.0" target="_black"><i class="icon icon-github"> 如果你喜欢这种图床风格就下载喔 (๑•̀ㅂ•́)و✧</i></a>',
 	'domain'=>'http://127.0.0.1',
 	'imgurl'=>'http://127.0.0.1',
@@ -41,21 +41,21 @@ $config=Array
 	'imgRatio_preserve_headers'=>1,
 	'static_cdn'=>0,
 	'theme'=>'default',
-	'static_cdn_url'=>'https://cdn.jsdelivr.net/gh/icret/EasyImages2.0@2.5.0',
+	'static_cdn_url'=>'https://cdn.jsdelivr.net/gh/icret/EasyImages2.0@2.5.1',
 	'TinyPng_key'=>'',
 	'checkImg'=>0,
 	'checkImg_value'=>50,
 	'moderatecontent_key'=>'',
 	'nsfwjs_url'=>'',
-	'footer'=>'<a href="/admin/terms.php" target="_blank">请勿上传违反中国政策的图片</a>
-<script>
-var _hmt = _hmt || [];
-(function() {
-  var hm = document.createElement("script");
-  hm.src = "https://hm.baidu.com/hm.js?c790ac2bdc2f385757ecd0183206108d";
-  var s = document.getElementsByTagName("script")[0]; 
-  s.parentNode.insertBefore(hm, s);
-})();
+	'footer'=>'<a href="/admin/terms.php" target="_blank">请勿上传违反中国政策的图片</a>
+<script>
+var _hmt = _hmt || [];
+(function() {
+  var hm = document.createElement("script");
+  hm.src = "https://hm.baidu.com/hm.js?c790ac2bdc2f385757ecd0183206108d";
+  var s = document.getElementsByTagName("script")[0]; 
+  s.parentNode.insertBefore(hm, s);
+})();
 </script>',
 	'ad_top'=>0,
 	'ad_top_info'=>' <!--广告 按照这个范例替换相应链接，如果想多几个广告，就多复制几个-->
@@ -82,5 +82,5 @@ var _hmt = _hmt || [];
 	'check_ip_model'=>0,
 	'check_ip_list'=>'',
 	'version'=>'2.5.1',
-	'form'=>'2022-02-17 23:53:12'
+	'update'=>'2022-02-18 00:23:07'
 	);
\ No newline at end of file