From 23f2eb2b8b457987abf0199f863872acf76dd81d Mon Sep 17 00:00:00 2001
From: devil_gong <devil_gong@wochacha.com>
Date: Fri, 21 Jun 2019 09:50:51 +0800
Subject: [PATCH] =?UTF-8?q?=E9=97=AE=E7=AD=94=E7=AE=A1=E7=90=86=E4=BC=98?=
 =?UTF-8?q?=E5=8C=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 application/admin/view/default/answer/index.html       |  2 +-
 .../admin/view/default/orderaftersale/index.html       |  4 ++--
 application/service/AnswerService.php                  | 10 +++++-----
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/application/admin/view/default/answer/index.html b/application/admin/view/default/answer/index.html
index f75339c97..a11db88c7 100755
--- a/application/admin/view/default/answer/index.html
+++ b/application/admin/view/default/answer/index.html
@@ -217,7 +217,7 @@
 							<td class="view-operation">
 								<a href="{{:MyUrl('admin/answer/saveinfo', array_merge($params, ['id'=>$v['id']]))}}" class="am-btn am-btn-secondary am-btn-xs am-radius am-btn-block am-icon-edit"> 编辑</a>
 								{{if $v['is_reply'] eq 0}}
-									<button class="am-btn am-btn-success am-btn-xs am-radius am-btn-block submit-reply am-icon-gavel" data-am-modal="{target: '#my-popup-reply'}" data-json='{{:json_encode($v)}}'> 回复</button>
+									<button class="am-btn am-btn-success am-btn-xs am-radius am-btn-block submit-reply am-icon-gavel" data-am-modal="{target: '#my-popup-reply'}" data-json='{{:str_replace("'", '', json_encode($v))}}'> 回复</button>
 								{{/if}}
 								<button class="am-btn am-btn-danger am-btn-xs am-radius am-btn-block am-icon-trash-o submit-delete" data-url="{{:MyUrl('admin/answer/delete')}}" data-id="{{$v.id}}"> 删除</button>
 							</td>
diff --git a/application/admin/view/default/orderaftersale/index.html b/application/admin/view/default/orderaftersale/index.html
index c6789aaa2..5d8bbd8d4 100644
--- a/application/admin/view/default/orderaftersale/index.html
+++ b/application/admin/view/default/orderaftersale/index.html
@@ -279,10 +279,10 @@
                                     <button type="button" class="am-btn am-btn-secondary am-btn-xs am-radius am-icon-check am-btn-block submit-ajax" data-url="{{:MyUrl('admin/orderaftersale/confirm')}}" data-id="{{$v.id}}" data-view="reload"> 确认</button>
                                 {{/if}}
                                 {{if $v['status'] eq 2}}
-                                    <button type="button" class="am-btn am-btn-secondary am-btn-xs am-radius am-icon-gavel am-btn-block submit-audit" data-json='{{:json_encode($v)}}'> 审核</button>
+                                    <button type="button" class="am-btn am-btn-secondary am-btn-xs am-radius am-icon-gavel am-btn-block submit-audit" data-json='{{:str_replace("'", '', json_encode($v))}}'> 审核</button>
                                 {{/if}}
                                 {{if in_array($v['status'], [0,2])}}
-                                    <button type="button" class="am-btn am-btn-danger am-btn-xs am-radius am-icon-warning am-btn-block submit-refuse" data-json='{{:json_encode($v)}}'> 拒绝</button>
+                                    <button type="button" class="am-btn am-btn-danger am-btn-xs am-radius am-icon-warning am-btn-block submit-refuse" data-json='{{:str_replace("'", '', json_encode($v))}}'> 拒绝</button>
                                 {{/if}}
                                 {{if in_array($v['status'], [1,2])}}
                                     <button type="button" class="am-btn am-btn-warning am-btn-xs am-radius am-icon-paint-brush am-btn-block submit-ajax submit-cancel" data-url="{{:MyUrl('admin/orderaftersale/cancel')}}" data-id="{{$v.id}}" data-view="reload"> 取消</button>
diff --git a/application/service/AnswerService.php b/application/service/AnswerService.php
index 9d9b67e12..ed2704b55 100755
--- a/application/service/AnswerService.php
+++ b/application/service/AnswerService.php
@@ -228,11 +228,11 @@ class AnswerService
         // 开始操作
         $data = [
             'user_id'       => isset($params['user']['id']) ? intval($params['user']['id']) : (isset($params['user_id']) ? intval($params['user_id']) : 0),
-            'name'          => isset($params['name']) ? str_replace(['"', "'"], '', strip_tags($params['name'])) : '',
-            'tel'           => isset($params['tel']) ? str_replace(['"', "'"], '', strip_tags($params['tel'])) : '',
-            'title'         => isset($params['title']) ? str_replace(['"', "'"], '', strip_tags($params['title'])) : '',
-            'content'       => str_replace(['"', "'"], '', strip_tags($params['content'])),
-            'reply'         => isset($params['reply']) ? str_replace(['"', "'"], '', strip_tags($params['reply'])) : '',
+            'name'          => isset($params['name']) ? $params['name'] : '',
+            'tel'           => isset($params['tel']) ? $params['tel'] : '',
+            'title'         => isset($params['title']) ? $params['title'] : '',
+            'content'       => $params['content'],
+            'reply'         => isset($params['reply']) ? $params['reply'] : '',
             'access_count'  => isset($params['access_count']) ? intval($params['access_count']) : 0,
             'is_reply'      => isset($params['is_reply']) ? intval($params['is_reply']) : 0,
             'is_show'       => isset($params['is_show']) ? intval($params['is_show']) : 0,