参数有效性判断

app/reader/get_para.php

@@ -4,8 +4,19 @@ require_once "../path.php";
 
 define("_MAX_CHAPTER_LEN_" , 20000);
 
-$_book = $_GET["book"];
-$_para = $_GET["para"];
+if(isset($_GET["book"])){
+    $_book = $_GET["book"];
+}
+else{
+    exit;
+}
+if(isset($_GET["para"])){
+    $_para = $_GET["para"];
+}
+else{
+    exit;
+}
+
 if(isset($_GET["begin"])){
     $_begin = $_GET["begin"];
 }
@@ -25,7 +36,6 @@ if($_view=="sent"){
 }
 
 
-
 PDO_Connect("sqlite:"._FILE_DB_PALITEXT_);
 $query = "SELECT * FROM 'pali_text'  WHERE book= ? AND paragraph= ?";
 $FetchParInfo = PDO_FetchRow($query , array($_book,$_para));