漏洞定位:/index.php/wap/public_api/get_cid_article
问题修复:修复文件application/wap/model/wap/ArticleCategory
public static function cidByArticleList($cid = 0, $first = 0, $limit = 0, $field = '*')
{
$model = Db::name('article');
if ((int)$cid > 0) {
$model = $model->where('cid', (int)$cid);
}
return $model->field($field)->where('status', 1)->where('hide', 0)->order('sort DESC,add_time DESC')->limit($first, $limit)->select();
}