!1 完善防护机制，修复了代码中存在的安全漏洞

Merge pull request !1 from 再遇雌鹿/master

src/admin/sys_data_done.php

@@ -100,6 +100,7 @@ if ($dopost == 'bak') {
         $fs = array();
         $bakStr = '';
         //分析表里的字段信息
+        $nowtable = str_replace("`", "", $nowtable);
         $dsql->GetTableFields($nowtable);
         $intable = "INSERT INTO `$nowtable` VALUES(";
         while ($r = $dsql->GetFieldObject()) {

src/apps/mytag_js.php

@@ -36,6 +36,7 @@ if (isset($nocache) || !file_exists($cacheFile) || time() - filemtime($cacheFile
         $myvalues = str_replace('"', '\"', $myvalues);
         $myvalues = str_replace("\r", "\\r", $myvalues);
         $myvalues = str_replace("\n", "\\n", $myvalues);
+        $myvalues = str_replace("<?", "", $myvalues);
         $myvalues =  "<!--\r\ndocument.write(\"{$myvalues}\");\r\n-->\r\n";
         file_put_contents($cacheFile, $myvalues);
     }