From 6ad469452f9d986cbda3cdfdcd1a1b2d02324e40 Mon Sep 17 00:00:00 2001
From: ypshidifu <ypshidifu@ypshidifu.cn>
Date: Mon, 13 Jul 2026 21:18:26 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D(today=5Fbonds,admin.php):=20?=
 =?UTF-8?q?PHP=E6=95=B0=E7=BB=84key=E8=87=AA=E5=8A=A8=E8=BD=AC=E6=95=B4?=
 =?UTF-8?q?=E6=95=B0=E5=AF=BC=E8=87=B4r.name=E4=B8=BAnumber=E2=86=92escAdm?=
 =?UTF-8?q?Html=E7=88=86=E7=82=B8\n\n=E3=80=90=E6=A0=B9=E5=9B=A0=E3=80=91P?=
 =?UTF-8?q?HP=E4=B8=AD[['player=5Fname']]=E5=BD=93=E7=8E=A9=E5=AE=B6?=
 =?UTF-8?q?=E5=90=8D=E4=B8=BA=E7=BA=AF=E6=95=B0=E5=AD=97=E6=97=B6=EF=BC=8C?=
 =?UTF-8?q?PHP=E8=87=AA=E5=8A=A8=E5=B0=86\narray=20key=E8=BD=AC=E4=B8=BAin?=
 =?UTF-8?q?teger=EF=BC=8Carray=5Fkeys=E8=BF=94=E5=9B=9E=E6=95=B4=E6=95=B0?=
 =?UTF-8?q?=E3=80=82JSON=E7=BC=96=E7=A0=81=E5=90=8Ename=E5=AD=97=E6=AE=B5?=
 =?UTF-8?q?=E4=B8=BAnumber=E3=80=82\nJS=E7=AB=AF(r.name||'')=20=E2=86=92?=
 =?UTF-8?q?=20123||''=20=3D=20123=EF=BC=8C123.replace()=20=E2=86=92=20Type?=
 =?UTF-8?q?Error=E3=80=82\n\n=E3=80=90=E4=BF=AE=E5=A4=8D=E3=80=91\n-=20tod?=
 =?UTF-8?q?ay=5Fbonds.php:=20'name'=20=3D>=20(string)=20=E6=98=BE=E5=BC=8F?=
 =?UTF-8?q?=E5=AD=97=E7=AC=A6=E4=B8=B2=E5=8C=96\n-=20admin.php:=20escAdmHt?=
 =?UTF-8?q?ml=20=E6=94=B9=E7=94=A8=20String(s=3F=3F'')=20=E9=98=B2?=
 =?UTF-8?q?=E5=BE=A1=E6=89=80=E6=9C=89=E9=9D=9E=E5=AD=97=E7=AC=A6=E4=B8=B2?=
 =?UTF-8?q?=E7=B1=BB=E5=9E=8B?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 admin.php       | 2 +-
 today_bonds.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin.php b/admin.php
index bb2ff53..5fcc940 100644
--- a/admin.php
+++ b/admin.php
@@ -2255,7 +2255,7 @@ async function adminSubmitCreateTicket() {
     } catch (e) { errEl.textContent = '创建失败: ' + e.message; }
 }
 
-function escAdmHtml(s) { return (s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;'); }
+function escAdmHtml(s) { return String(s??'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;'); }
 
 function adminProcessInlineMd(text) {
     let s = text;
diff --git a/today_bonds.php b/today_bonds.php
index 977dcec..d43a300 100644
--- a/today_bonds.php
+++ b/today_bonds.php
@@ -82,7 +82,7 @@ function getTodayBondData() {
         $income = $incomeData[$p] ?? 0;
         $net = $income - $spend;
         $totalSpend += $spend; $totalIncome += $income;
-        $rows[] = ['name' => $p, 'spend' => $spend, 'income' => $income, 'net' => $net];
+        $rows[] = ['name' => (string)$p, 'spend' => $spend, 'income' => $income, 'net' => $net];
     }
     usort($rows, fn($a,$b) => $b['net'] - $a['net']);
     return [