原因說明：前臺申請講師功能點存在存儲型xss漏洞，攻擊者可以獲取管理員登錄cookie，進行劫持釣魚等危害

修改文件：app\wap\model\merchant\UserEnter

修改方法：setUserEnter()

    public static function setUserEnter($data, $uid)
    {
        $data['address'] = strip_tags($data['address']);
        $data['merchant_name'] = strip_tags($data['merchant_name']);
        $data['explain'] = strip_tags($data['explain']);
        $data['introduction'] = strip_tags($data['introduction']);
        $data['charter'] = json_encode($data['charter']);
        $data['label'] = json_encode($data['label']);
        if (self::be(['uid' => $uid])) {
            $data['status'] = 0;
            return self::edit($data, $uid, 'uid');
        } else {
            if (self::be(['link_tel' => $data['link_tel']])) return self::setErrorInfo('該手機號已使用，不可重復使用!');
            $data['uid'] = $uid;
            $data['add_time'] = time();
            return self::set($data);
        }
    }

修改文件：app\web\model\merchant\UserEnter

修改方法：setUserEnter()

    public static function setUserEnter($data, $uid)
    {
        $data['address'] = strip_tags($data['address']);
        $data['merchant_name'] = strip_tags($data['merchant_name']);
        $data['explain'] = strip_tags($data['explain']);
        $data['introduction'] = strip_tags($data['introduction']);
        $data['charter'] = json_encode($data['charter']);
        $data['label'] = json_encode($data['label']);
        if (self::be(['uid' => $uid])) {
            $data['status'] = 0;
            return self::edit($data, $uid, 'uid');
        } else {
            if (self::be(['link_tel' => $data['link_tel']])) return self::setErrorInfo('該手機號已使用，不可重復使用!');
            $data['uid'] = $uid;
            $data['add_time'] = time();
            return self::set($data);
        }
    }