1.修复上传漏洞和SQL注入漏洞

app/common/middleware/InstallGuard.php

@@ -0,0 +1,29 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\common\middleware;
+
+use Webman\Http\Request;
+use Webman\Http\Response;
+use Webman\MiddlewareInterface;
+
+/**
+ * 已安装系统禁止访问安装 API
+ */
+class InstallGuard implements MiddlewareInterface
+{
+    public function process(Request $request, callable $handler): Response
+    {
+        if (is_system_installed()) {
+            return new Response(403, ['Content-Type' => 'application/json'], json_encode([
+                'code' => 0,
+                'msg'  => __('The system has completed installation. If you need to reinstall, please delete the %file% file first', ['%file%' => 'public/install.lock']),
+                'time' => time(),
+                'data' => null,
+            ], JSON_UNESCAPED_UNICODE));
+        }
+
+        return $handler($request);
+    }
+}