framework icon indicating copy to clipboard operation
framework copied to clipboard

ThinkPHP Framework

Results 260 framework issues
Sort by recently updated
recently updated
newest added

Any method of any class, where eval is called to execute php code, thereby executing php and writing to a file. ```php

今天测试了v6.0.13在PHP8.1下的表现,很遗憾,依旧一堆报错,部分截取如下: `PHP Fatal error: During inheritance of ArrayAccess: Uncaught think\exception\ErrorException: Return type of think\Request::offsetGet($name) should either be compatible with ArrayAccess::offsetGet(mixed $offset): mixed, or the #[\ReturnTypeWillChange] attribute should be used to...

![image](https://user-images.githubusercontent.com/45870098/166150113-c173aa8a-ef0d-4c71-9802-32807ebea292.png)

6.0.13版本无法切换语言,相同的代码6.0.9就可以 6.0.13版本无法切换语言,相同的代码6.0.9就可以 6.0.13版本无法切换语言,相同的代码6.0.9就可以

thinkphp6 php7.4 /** * @param array $where * @param array $data * @param array $loginUser * @return bool */ public static function removeWhere(array $where, array $data = [], array $loginUser):bool...

Hi,我在使用验证器内置规则时,提示规则错误。具体的比如在用graph、print等验证规则的时候,提示规则错误;其他的比如url之类的就是正常的。进了Validate.php查看也没有发现graph之类的验证规则。其他的比如lower,upper,space,xdigit等也是报规则错误,版本6.0.13。请帮助解决。谢谢

![image](https://user-images.githubusercontent.com/45870098/180898368-3cb1347f-1e41-4982-8ab6-e5c125a0b9cd.png)

漏洞:CVE-2022-33107是否已经修复 漏洞详情:ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload

[ $filter = $this->getFilter($filter, $default);](https://github.com/top-think/framework/blob/88ad731eae6d8fd7ff58531a9136c2456c5f62dc/src/think/Request.php#L1115) 这边可以省略写成teturn $this->filterData($data, $filter, $name, $default);

例如: 模型内定义 ``` protected $append = ['status_text']; public function getStatusTextAttr(){ return '正常'; } --------------------------------------- User::where('id',100)->findOrEmpty(); ``` 结果不存在的话依然会调用getStatusAttr()获取器 这样是否合理 个人感觉结果不存在应该返回空模型