参数[cmd]非法！<script>alert("参数[cmd]非法");</script>