tp5.0漏洞修复

修改路径\thinkphp\library\think\Request.php 525行

        // $this->method = strtoupper($_POST[Config::get('var_method')]);
        // $this->{$this->method}($_POST);
        $method = strtoupper($_POST[Config::get('var_method')]);
        if (in_array($method, ['GET', 'POST', 'DELETE', 'PUT', 'PATCH'])) {
	        $this->method = $method;
	        $this->{$this->method}($_POST);
        } else {
	        $this->method = 'POST';
        }
        unset($_POST[Config::get('var_method')]);