ecshop/OMS
1
0
Fork 0
mirror of https://gitee.com/ShopeX/OMS synced 2026-04-29 03:55:37 +08:00
Code Issues Packages Projects Releases Wiki Activity

【新增】天猫超市商品下载同步

Browse Source 
【修复】天猫超市发货问题
【修复】采购单单号因含特殊字符导致入库或取消失败
【修复】售后批量操作设置显示不正确
This commit is contained in:
chenping
2026-04-21 23:42:49 +08:00
parent b20d422532
commit e3d3593fdd
34 changed files with 297 additions and 251 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
app/purchase/model/po.php
View File

@@ -78,6 +78,23 @@ class purchase_mdl_po extends dbeav_model{
return $arr;
}
/**
* 导入采购单号安全清洗
*
* 仅保留安全字符，避免引号、&、注释符等特殊字符进入后续 SQL/缓存/日志链路。
*
* @param string $poBn
* @return string
*/
private function sanitizeImportPoBn($poBn)
{
$poBn = trim(str_replace('　', '', (string) $poBn));
$poBn = strip_tags($poBn);
$poBn = preg_replace('/[^A-Za-z0-9._\/-]/', '', $poBn);
return substr($poBn, 0, 32);
}
function getSafeStock($data=null, $start=0, $end=1){
$where = ' ';
@@ -572,7 +589,9 @@ class purchase_mdl_po extends dbeav_model{
$memo = serialize($export_memo);
}
$pSdf['memo'] = $memo;
$pSdf['po_bn'] = $aP['purchase']['contents'][0][0];
// 导入的采购单号
$pSdf['po_bn'] = $this->sanitizeImportPoBn($aP['purchase']['contents'][0][0]);
$pSdf['supplier_id'] = $supplier['supplier_id'];
$pSdf['branch_id'] = $branch['branch_id'];
@@ -750,6 +769,8 @@ class purchase_mdl_po extends dbeav_model{
$fileData['item']['contents'][] = $row;
}else {
$row[0] = $this->sanitizeImportPoBn($row[0]);
$row_0 = $row[0];
if (empty($row_0)){
$msg['error'] = "请填写采购单编号";
return false;