统计

applications/Statistics/Modules/logger.php

@@ -31,7 +31,7 @@ function logger($module, $interface, $date, $start_time, $offset, $count)
         }
         
         $next_page_url = http_build_query($_GET);
-        $log_str = nl2br($log_str);
+        $log_str = nl2br(htmlspecialchars($log_str));
         $log_str .= "</br><center><a href='/?fn=logger&$next_page_url'>下一页</a></center>";
 
         include ST_ROOT . '/Views/header.tpl.php';

applications/Statistics/Views/admin.tpl.php

@@ -60,10 +60,14 @@
 		<div class="col-md-3 column">
 		</div>
 		<div class="col-md-6 column">
+		<?php if($act!='add_to_server_list'){?>
 			<form action="/?fn=admin&act=<?php echo $action;?>" method="post">
 			<textarea rows="22" cols="30" name="ip_list"><?php echo $ip_list_str;?></textarea>
 			<div><button type="submit" class="btn btn-default"><?php echo $act == 'detect_server' ? '添加到数据源列表' : '保存'?></button></div>
 			</form>
+			<?php }else{?>
+			<a type="button" class="btn btn-default" href="/">返回主页</a><a type="button" class="btn btn-default" href="/?fn=admin">继续添加</a>
+			<?php }?>
 		</div>
 		<div class="col-md-3 column">
 		</div>