v0.9.14

data/update.log

@@ -28,4 +28,10 @@ CREATE INDEX on_options_key_IDX ON on_options ("key");
 1. 简化安装过程，无需再手动修改配置安装
 2. 新增默认密码安全检测
 3. 默认模板增加手机登录按钮
-4. 修复一处XSS漏洞
+4. 修复一处XSS漏洞
+
+20220216
+1. 修复一处登录漏洞
+
+20220221
+1. 修复默认主题字体图标不显示

functions/helper.php

@@ -28,7 +28,7 @@ function is_login(){
     //获取session
     $session = $_COOKIE['key'];
     //如果已经成功登录
-    if($session == $key) {
+    if($session === $key) {
         return true;
     }
     else{

templates/default/index.php

@@ -90,7 +90,7 @@
 		?>
 		<a href="#category-<?php echo $category['id']; ?>">
 			<li class="mdui-list-item mdui-ripple">
-				<div class="mdui-list-item-content category-name"><?php echo $category['name']; ?></div>
+				<div class="mdui-list-item-content category-name"><?php echo htmlspecialchars_decode($category['name']); ?></div>
 			</li>
 		</a>
 	    
@@ -146,7 +146,7 @@
                 }
             ?>
 			<div id = "category-<?php echo $category['id']; ?>" class = "mdui-col-xs-12 mdui-typo-title cat-title">
-				<?php echo $category['name']; ?> <?php echo $property; ?>
+				<?php echo htmlspecialchars_decode($category['name']); ?> <?php echo $property; ?>
 				<span class = "mdui-typo-caption"><?php echo $category['description']; ?></span>
 			</div>
 			<!-- 遍历链接 -->

version.txt

@@ -1 +1 @@
-v0.9.13-20220214
+v0.9.14-20220221