diff --git a/src/main/java/net/mingsoft/cms/action/web/MCmsAction.java b/src/main/java/net/mingsoft/cms/action/web/MCmsAction.java index 2fcbea2d..061e1594 100644 --- a/src/main/java/net/mingsoft/cms/action/web/MCmsAction.java +++ b/src/main/java/net/mingsoft/cms/action/web/MCmsAction.java @@ -385,7 +385,9 @@ public class MCmsAction extends net.mingsoft.cms.action.BaseAction { //sql注入过滤 searchMap.put(k,v.toString().replaceAll("('|\"|\\\\)","\\\\$1")); searchMap.put(k,clearXss(searchMap.get(k).toString())); - urlParams.append(k).append("=").append(searchMap.get(k)).append("&"); + if(!ParserUtil.SIZE.equals(k)&&!ParserUtil.PAGE_NO.equals(k)){ + urlParams.append(k).append("=").append(searchMap.get(k)).append("&"); + } }); //查询数量 @@ -429,8 +431,6 @@ public class MCmsAction extends net.mingsoft.cms.action.BaseAction { page.setPreUrl(preUrl); page.setLastUrl(lastUrl); - searchMap.put(ParserUtil.PAGE_NO, pageNo); - //解析后的内容 String content = ""; try { diff --git a/src/main/java/net/mingsoft/cms/dao/IContentDao.xml b/src/main/java/net/mingsoft/cms/dao/IContentDao.xml index 2726a0a2..4b153a9f 100644 --- a/src/main/java/net/mingsoft/cms/dao/IContentDao.xml +++ b/src/main/java/net/mingsoft/cms/dao/IContentDao.xml @@ -225,7 +225,8 @@ ct.del=0 and content_title like CONCAT('%',#{contentTitle},'%') - and content_category_id=#{contentCategoryId} + and (content_category_id=#{contentCategoryId} or content_category_id in + (select id FROM cms_category where )) and content_type LIKE CONCAT('%',#{contentType},'%') and content_display=#{contentDisplay} and content_author=#{contentAuthor}