edit

application/api_broker/controller/News.php

@@ -145,10 +145,13 @@ class News extends Basic
             return $this->response(101, '文章内容为空');
         }
 
+        if (mb_strlen($this->params['content']) > 501) {
+            return $this->response(101, '内容字数超过限制！');
+        }
 
         $data['agent_id']        = $this->agentId;
         $data['s_news_id']       = $this->params['news_id'];
-        $data['comment_content'] = $this->params['content'];
+        $data['comment_content'] = htmlentities($this->params['content']);
         $data['status']          = 0;
 
         $m_new_comment = new SNewsComment();

application/index/controller/News.php

@@ -84,10 +84,6 @@ class News extends Basic
             return $this->response(101, '内容为空！');
         }
 
-        if (mb_strlen($this->params['content']) > 501) {
-            return $this->response(101, '内容字数超过限制！');
-        }
-
         if (empty($this->params['file_img'])) {
             return $this->response(101, '封面图片为空');
         }