From c4f756b73356dab6207f28b4870cffd539c5e4e9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=B0=8F=E8=83=A1?= <3203164629@qq.com>
Date: Wed, 17 Jul 2024 15:32:03 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E4=B8=80=E4=B8=8B=E4=B8=80?=
 =?UTF-8?q?=E7=9B=B4=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 core/class/perm/perm_check.php | 2 +-
 dzz/system/fileselection.php   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/class/perm/perm_check.php b/core/class/perm/perm_check.php
index ec98c98..99384ba 100644
--- a/core/class/perm/perm_check.php
+++ b/core/class/perm/perm_check.php
@@ -65,7 +65,7 @@ class perm_check{
                         return self::getPerm($folder['pfid'],$bz,$i);
                     }elseif (shareLink($_GET['shareLink'],$_GET['path'])){
                         return perm_binPerm::getGroupPower('read');
-                    }elseif($folder = C::t('folder')->fetch_home_by_uid($uid)){//查看当前用户的个人网盘fid
+                    }elseif($folder = C::t('folder')->fetch_home_by_uid($_G['uid'])){//查看当前用户的个人网盘fid
                         if($folder['fid']){
                             if(!($folder['fid']==$fid)){//判断当前用户的个人网盘fid是否等于当前用户访问的fid
                                 $fids = get_all_chilrdenfid_by_pfid($folder['fid']);
diff --git a/dzz/system/fileselection.php b/dzz/system/fileselection.php
index 64a0a46..75f354f 100644
--- a/dzz/system/fileselection.php
+++ b/dzz/system/fileselection.php
@@ -17,7 +17,7 @@ $type =  isset($_GET['type']) ? intval($_GET['type']):0;//2,选择位置；1，
 $exttype =  isset($_GET['exttype']) ? trim($_GET['exttype']):'';//类型范围
 $filename = isset($_GET['filename'])?trim($_GET['filename']):'';
 $token = isset($_GET['token']) ? trim($_GET['token']):'';//调用地方传递参数，将原样返回给回调函数
-$perm = isset($_GET['perm']) ? trim($_GET['perm']):'write';//权限判断值：比如 write,判断是否有写入权限；再如，write,copy，判断是否有写入和copy权限(即多个权限用逗号分隔)
+$perm = isset($_GET['perm']) ? trim($_GET['perm']):'';//权限判断值：比如 write,判断是否有写入权限；再如，write,copy，判断是否有写入和copy权限(即多个权限用逗号分隔)
 $mulitype =  isset($_GET['mulitype']) ? intval($_GET['mulitype']):0;//0，不允许多选；1，允许多选
 if($type == 1){
     $rid = isset($_GET['rid']) ? trim($_GET['rid']):'';