From 61785154fc381efe2b7d770bd3a49985052aa279 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=8F=99=E8=BF=B0=E3=80=81=E5=88=AB=E7=A6=BB?=
 <2449271624@qq.com>
Date: Mon, 11 Dec 2023 14:31:51 +0800
Subject: [PATCH] =?UTF-8?q?=E8=B0=83=E6=95=B4document.write=E8=BF=87?=
 =?UTF-8?q?=E5=A4=9A=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/admin/templets/index_body.htm |  1 -
 src/system/common.func.php        | 24 ++++++++++++------------
 2 files changed, 12 insertions(+), 13 deletions(-)
diff --git a/src/admin/templets/index_body.htm b/src/admin/templets/index_body.htm
index 57545733..ba4cd09e 100644
--- a/src/admin/templets/index_body.htm
+++ b/src/admin/templets/index_body.htm
@@ -15,7 +15,6 @@
 	<script src="/static/web/js/admin.body.js"></script>
 	<script src="/static/web/js/admin.update.js"></script>
 	<script src="/static/web/js/admin.main.js"></script>
-	<base target="_self">
 </head>
 <body>
 	<div class="row">
diff --git a/src/system/common.func.php b/src/system/common.func.php
index d105b033..a5c180a7 100755
--- a/src/system/common.func.php
+++ b/src/system/common.func.php
@@ -347,8 +347,8 @@ function ShowMsg($msg, $gourl, $onlymsg = 0, $limittime = 0)
         return;
     }
     if (empty($GLOBALS['cfg_plus_dir'])) $GLOBALS['cfg_plus_dir'] = '..';
-    $htmlhead  = "<!DOCTYPE html><html><head><meta charset='utf-8'><meta http-equiv='X-UA-Compatible' content='IE=Edge,chrome=1'><meta name='viewport' content='width=device-width,initial-scale=1'><title>系统提示</title><link rel='stylesheet' href='/static/web/css/bootstrap.min.css'><link rel='stylesheet' href='/static/web/css/admin.css'></head><base target='_self'><body><script>";
-    $htmlfoot  = "</script></body></html>";
+    $htmlhead  = "<!DOCTYPE html><html><head><meta charset='utf-8'><meta http-equiv='X-UA-Compatible' content='IE=Edge,chrome=1'><meta name='viewport' content='width=device-width,initial-scale=1'><title>系统提示</title><link rel='stylesheet' href='/static/web/css/bootstrap.min.css'><link rel='stylesheet' href='/static/web/css/admin.css'></head><base target='_self'><body>";
+    $htmlfoot  = "</body></html>";
     $litime = ($limittime == 0 ? 1000 : $limittime);
     $func = '';
     if ($gourl == '-1') {
@@ -362,23 +362,23 @@ function ShowMsg($msg, $gourl, $onlymsg = 0, $limittime = 0)
         if (preg_match('/close::/', $gourl)) {
             $tgobj = trim(preg_replace('/close::/', '', $gourl));
             $gourl = 'javascript:;';
-            $func .= "window.parent.document.getElementById('{$tgobj}').style.display='none';\r\n";
+            $func .= "<script>window.parent.document.getElementById('{$tgobj}').style.display='none';</script>";
         }
-        $func .= "var pgo=0;function JumpUrl(){if (pgo==0) {location='$gourl'; pgo=1;}}";
+        $func .= "<script>var pgo=0;function JumpUrl(){if (pgo==0) {location='$gourl'; pgo=1;}}</script>";
         $rmsg = $func;
-        $rmsg .= "document.write(\"<div class='tips'><div class='tips-box'><div class='tips-head'><p>系统提示</p></div>\");";
-        $rmsg .= "document.write(\"<div class='tips-body'>\");";
-        $rmsg .= "document.write(\"".str_replace("\"", "“", $msg)."\");";
-        $rmsg .= "document.write(\"";
+        $rmsg .= "<div class='tips'><div class='tips-box'><div class='tips-head'><p>系统提示</p></div>";
+        $rmsg .= "<div class='tips-body'>";
+        $rmsg .= "".str_replace("\"", "“", $msg)."";
+        $rmsg .= "";
         if ($onlymsg == 0) {
             if ($gourl != 'javascript:;' && $gourl != '') {
-                $rmsg .= "<div class='text-center mt-3'><a href='{$gourl}' class='btn btn-success btn-sm'>点击反应</a></div>\");";
-                $rmsg .= "setTimeout('JumpUrl()', $litime);";
+                $rmsg .= "<div class='text-center mt-3'><a href='{$gourl}' class='btn btn-success btn-sm'>点击反应</a></div>";
+                $rmsg .= "<script>setTimeout('JumpUrl()', $litime);</script>";
             } else {
-                $rmsg .= "</div>\");";
+                $rmsg .= "</div>";
             }
         } else {
-            $rmsg .= "</div></div>\");";
+            $rmsg .= "</div></div>";
         }
         $msg  = $htmlhead.$rmsg.$htmlfoot;
     }
