zcdsj
/
safesite
5
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

试题导入时分类漏洞

This commit is contained in:
caoqianming 2020-11-17 11:13:55 +08:00
parent 8e4d807398
commit 24bc4dfc6b
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
safesite/daoru.py
View File

@ -95,7 +95,7 @@ def drquestions(companyid,path,userid):
cateobj = Questioncat.objects.create(usecomp=Partment.objects.get(partid=companyid),name=cate) cateobj = Questioncat.objects.create(usecomp=Partment.objects.get(partid=companyid),name=cate)
if type == '单选': if type == '单选':
if Question.objects.filter(type=1,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').exists(): if Question.objects.filter(type=1,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').exists():
Question.objects.filter(type=1,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').update(nousecomps='') Question.objects.filter(type=1,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').update(nousecomps='', questioncat=cateobj)
else: else:
if right in ['A','B','C','D','E','F']: if right in ['A','B','C','D','E','F']:
obj = Question() obj = Question()
@ -115,7 +115,7 @@ def drquestions(companyid,path,userid):
elif type == '多选': elif type == '多选':
right = list(right) right = list(right)
if Question.objects.filter(type=2,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').exists(): if Question.objects.filter(type=2,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').exists():
Question.objects.filter(type=2,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').update(nousecomps='') Question.objects.filter(type=2,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').update(nousecomps='', questioncat=cateobj)
else: else:
if [False for c in right if c not in qlist]: if [False for c in right if c not in qlist]:
pass pass
@ -140,7 +140,7 @@ def drquestions(companyid,path,userid):
else: else:
right = 'B' right = 'B'
if Question.objects.filter(type=3,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').exists(): if Question.objects.filter(type=3,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').exists():
Question.objects.filter(type=3,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').update(nousecomps='') Question.objects.filter(type=3,title=title,right=right,deletemark=1,usecomps = ','+companyid+',').update(nousecomps='', questioncat=cateobj)
else: else:
obj = Question() obj = Question()
obj.type = 3 obj.type = 3

6
safesite/views.py
View File

@ -5038,6 +5038,12 @@ def apitool(req):
# Userprofile.objects.filter(realname='null').update(realname='') # Userprofile.objects.filter(realname='null').update(realname='')
# Userprofile.objects.filter(cardnum='null').update(cardnum='') # Userprofile.objects.filter(cardnum='null').update(cardnum='')
return JsonResponse({"code":1}) return JsonResponse({"code":1})
elif a == 'correct_questioncat':
# print(Questioncat.objects.filter(usecomp__partid=2184).delete())
print(Question.objects.filter(questioncat__name='冬季四防安全生产知识').count())
# Questioncat.objects.filter(usecomp__partname='广安厂').update(parent=None, link=',', deletemark=1)
# print(Questioncat.objects.filter(name='冬季四防安全生产知识').values('usecomp__partname'))
return JsonResponse({"code":1})