新增搜索字段安全检测

修复find_in_set多值时无法查询的BUG
移除冗余查询代码

@@ -96,6 +96,9 @@ return [
     'End time'                                              => '结束时间',
     'End time'                                              => '结束时间',
     'Create time'                                           => '创建时间',
     'Create time'                                           => '创建时间',
     'Update time'                                           => '更新时间',
     'Update time'                                           => '更新时间',
+    'Createtime'                                            => '创建时间',
+    'Updatetime'                                            => '更新时间',
+    'Deletetime'                                            => '删除时间',
     'Flag'                                                  => '标志',
     'Flag'                                                  => '标志',
     'Drag to sort'                                          => '拖动进行排序',
     'Drag to sort'                                          => '拖动进行排序',
     'Redirect now'                                          => '立即跳转',
     'Redirect now'                                          => '立即跳转',

@@ -266,7 +266,6 @@ class Backend extends Controller
         $tableName = '';
         $tableName = '';
         if ($relationSearch) {
         if ($relationSearch) {
             if (!empty($this->model)) {
             if (!empty($this->model)) {
-                $name = \think\Loader::parseName(basename(str_replace('\\', '/', get_class($this->model))));
                 $name = $this->model->getTable();
                 $name = $this->model->getTable();
                 $tableName = $name . '.';
                 $tableName = $name . '.';
             }
             }
@@ -290,6 +289,9 @@ class Backend extends Controller
             $where[] = [implode("|", $searcharr), "LIKE", "%{$search}%"];
             $where[] = [implode("|", $searcharr), "LIKE", "%{$search}%"];
         }
         }
         foreach ($filter as $k => $v) {
         foreach ($filter as $k => $v) {
+            if (!preg_match('/^[a-zA-Z0-9_\-\.]+$/', $k)) {
+                continue;
+            }
             $sym = isset($op[$k]) ? $op[$k] : '=';
             $sym = isset($op[$k]) ? $op[$k] : '=';
             if (stripos($k, ".") === false) {
             if (stripos($k, ".") === false) {
                 $k = $tableName . $k;
                 $k = $tableName . $k;
@@ -327,7 +329,12 @@ class Backend extends Controller
                 case 'FINDIN':
                 case 'FINDIN':
                 case 'FINDINSET':
                 case 'FINDINSET':
                 case 'FIND_IN_SET':
                 case 'FIND_IN_SET':
-                    $where[] = "FIND_IN_SET('{$v}', " . ($relationSearch ? $k : '`' . str_replace('.', '`.`', $k) . '`') . ")";
+                    $v = is_array($v) ? $v : explode(',', str_replace(' ', ',', $v));
+                    foreach ($v as $index => $item) {
+                        $item = str_replace([' ', ',', "'"], '', $item);
+                        $item = addslashes(htmlentities(strip_tags($item)));
+                        $where[] = "FIND_IN_SET('{$item}', `" . ($relationSearch ? str_replace('.', '`.`', $k) : $k) . "`)";
+                    }
                     break;
                     break;
                 case 'IN':
                 case 'IN':
                 case 'IN(...)':
                 case 'IN(...)':
@@ -368,10 +375,6 @@ class Backend extends Controller
                     }
                     }
                     $where[] = [$k, str_replace('RANGE', 'BETWEEN', $sym) . ' time', $arr];
                     $where[] = [$k, str_replace('RANGE', 'BETWEEN', $sym) . ' time', $arr];
                     break;
                     break;
-                case 'LIKE':
-                case 'LIKE %...%':
-                    $where[] = [$k, 'LIKE', "%{$v}%"];
-                    break;
                 case 'NULL':
                 case 'NULL':
                 case 'IS NULL':
                 case 'IS NULL':
                 case 'NOT NULL':
                 case 'NOT NULL':