12306后来补的 检索注入 BUG修改 JS代码

function replaceALL(){
var replaceTxt = document.getElementById("searchwordl").value;
var relTxt = replaceTxt.replace(/^\s+|\s+$/g,"");
if(typeof(document.getElementById("searchwordl"))=="undefined"||relTxt==""){
alert("请输入检索条件");
document.getElementById("searchwordl").focus();
return false;
}
if(typeof(document.getElementById("searchwordl"))!="undefined"){
var searchwordl = document.getElementById('searchwordl').value;
var sig = 0;
if(searchwordl.indexOf("'") > -1 || searchwordl.indexOf("\"") > -1 || searchwordl.indexOf("%") > -1 || searchwordl.indexOf("#") > -1 || searchwordl.indexOf("&") > -1 || searchwordl.indexOf("*") > -1 || searchwordl.indexOf("(") > -1 || searchwordl.indexOf(")") > -1 || searchwordl.indexOf("@") > -1 || searchwordl.indexOf("`") > -1 || searchwordl.indexOf("/") > -1 || searchwordl.indexOf("\\") > -1 || searchwordl.indexOf(",") > -1 || searchwordl.indexOf(".") > -1 || searchwordl.indexOf("=") > -1 || searchwordl.indexOf("<") > -1 || searchwordl.indexOf(">") > -1)
sig = 1;
searchwordl=searchwordl.replace("'","");
//searchwordl=searchwordl.replace(" ","");
searchwordl=searchwordl.replace("%","");
searchwordl=searchwordl.replace("#","");
searchwordl=searchwordl.replace("&","");
searchwordl=searchwordl.replace("*","");
searchwordl=searchwordl.replace("(","");
searchwordl=searchwordl.replace(")","");
searchwordl=searchwordl.replace("@","");
searchwordl=searchwordl.replace("`","");
searchwordl=searchwordl.replace("/","");
searchwordl=searchwordl.replace("\\","");
searchwordl=searchwordl.replace(",","");
searchwordl=searchwordl.replace(".","");
searchwordl=searchwordl.replace("=","");
searchwordl=searchwordl.replace("<","");
searchwordl=searchwordl.replace(">","");
if(searchwordl == '请输入搜索条件'){
alert("请输入搜索条件");
return false;
}
if(searchwordl == ''){
alert("请正确输入搜索条件");
return false;
}
if(sig == 1){
alert("请正确输入搜索条件");
return false;
}
document.getElementById('searchword').value=searchwordl;
return true;
//document.fmsearch.submit();
}
}