framework
framework copied to clipboard
ThinkPHP Framework
Any method of any class, where eval is called to execute php code, thereby executing php and writing to a file. ```php
今天测试了v6.0.13在PHP8.1下的表现,很遗憾,依旧一堆报错,部分截取如下: `PHP Fatal error: During inheritance of ArrayAccess: Uncaught think\exception\ErrorException: Return type of think\Request::offsetGet($name) should either be compatible with ArrayAccess::offsetGet(mixed $offset): mixed, or the #[\ReturnTypeWillChange] attribute should be used to...

6.0.13版本无法切换语言,相同的代码6.0.9就可以 6.0.13版本无法切换语言,相同的代码6.0.9就可以 6.0.13版本无法切换语言,相同的代码6.0.9就可以
thinkphp6 php7.4 /** * @param array $where * @param array $data * @param array $loginUser * @return bool */ public static function removeWhere(array $where, array $data = [], array $loginUser):bool...
Hi,我在使用验证器内置规则时,提示规则错误。具体的比如在用graph、print等验证规则的时候,提示规则错误;其他的比如url之类的就是正常的。进了Validate.php查看也没有发现graph之类的验证规则。其他的比如lower,upper,space,xdigit等也是报规则错误,版本6.0.13。请帮助解决。谢谢

漏洞:CVE-2022-33107是否已经修复 漏洞详情:ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload
[ $filter = $this->getFilter($filter, $default);](https://github.com/top-think/framework/blob/88ad731eae6d8fd7ff58531a9136c2456c5f62dc/src/think/Request.php#L1115) 这边可以省略写成teturn $this->filterData($data, $filter, $name, $default);
例如: 模型内定义 ``` protected $append = ['status_text']; public function getStatusTextAttr(){ return '正常'; } --------------------------------------- User::where('id',100)->findOrEmpty(); ``` 结果不存在的话依然会调用getStatusAttr()获取器 这样是否合理 个人感觉结果不存在应该返回空模型