主题 : 搜索报出异常.报出路径.不知道是否纯在注入风险。。。
级别: 童生
UID: 25957
积分:40 加为好友
威望: 0 精华: 0
主题:3 回复:15
注册时间:2011-11-20
在线时长:0
1#   发表于:2011-11-27 22:53:33  IP:222.196.*.*
The "channelId" parameter must be a number. The problematic instruction: ---------- ==> user-directive cms_lucene_page [on line 44, column 18 in WEB-INF/t/cms/www/red/special/搜索结果页.html] ---------- Java backtrace for programmers: ---------- com.jeecms.common.web.freemarker.MustNumberException: The "channelId" parameter must be a number. at com.jeecms.common.web.freemarker.DirectiveUtils.getInt(DirectiveUtils.java:176) at com.jeecms.cms.lucene.LuceneDirectiveAbstract.getChannelId(LuceneDirectiveAbstract.java:46) at com.jeecms.cms.lucene.LuceneDirectivePage.execute(LuceneDirectivePage.java:48) at freemarker.core.Environment.visit(Environment.java:263) at freemarker.core.UnifiedCall.accept(UnifiedCall.java:126) at freemarker.core.Environment.visit(Environment.java:210) at freemarker.core.MixedContent.accept(MixedContent.java:92) at freemarker.core.Environment.visit(Environment.java:210) at freemarker.core.ConditionalBlock.accept(ConditionalBlock.java:79) at freemarker.core.Environment.visit(Environment.java:210) at freemarker.core.MixedContent.accept(MixedContent.java:92) at freemarker.core.Environment.visit(Environment.java:210) at freemarker.core.Environment.process(Environment.java:190) at freemarker.template.Template.process(Template.java:237) at com.jeecms.common.web.springmvc.SimpleFreeMarkerView.renderMergedTemplateModel(SimpleFreeMarkerView.java:114) at org.springframework.web.servlet.view.AbstractTemplateView.renderMergedOutputModel(AbstractTemplateView.java:167) at org.springframework.web.servlet.view.AbstractView.render(AbstractView.java:250) at org.springframework.web.servlet.DispatcherServlet.render(DispatcherServlet.java:1047) at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:817) at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:719) at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:644) at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:549) at javax.servlet.http.HttpServlet.service(HttpServlet.java:617) at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.springframework.orm.hibernate3.support.OpenSessionInViewFilter.doFilterInternal(OpenSessionInViewFilter.java:198) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.jeecms.common.web.ProcessTimeFilter.doFilter(ProcessTimeFilter.java:38) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:852) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) at java.lang.Thread.run(Unknown Source) 

异常发生在全文搜索时候,在channelId 后加入 ‘   报异常/
级别: 总版主
UID: 10736
积分:148381 加为好友
威望: 205 精华: 42
主题:287 回复:126139
注册时间:2010-09-08
在线时长:15.55
2#   发表于:2011-11-28 08:44:14  IP:59.243.*.*
您好,生成索引了没,搜索不能有特殊符号哦
路漫漫其修远兮,吾将上下而求索!
级别: 童生
UID: 25957
积分:40 加为好友
威望: 0 精华: 0
主题:3 回复:15
注册时间:2011-11-20
在线时长:0
3#   发表于:2011-11-28 10:02:17  IP:222.198.*.*
没,直接跳出500页面.      我建议应该在搜索的时候加下字符验证. 然后再地址栏的时候在做下字符过滤。
级别: 总版主
UID: 10736
积分:148381 加为好友
威望: 205 精华: 42
主题:287 回复:126139
注册时间:2010-09-08
在线时长:15.55
4#   发表于:2011-11-28 10:09:39  IP:59.243.*.*
您的意见我们已经收录,以后版本会考虑添加上该功能的
路漫漫其修远兮,吾将上下而求索!
1 共1页