dedecms安全漏洞之/include/common.inc.php漏洞解决办法

发表时间:2019-06-04 16:17    责任编辑:莫都晨晓    浏览:
在 /include/common.inc.php 中

查找:foreach(Array('_GET','_POST','_COOKIE') as $_request)

将如下代码
foreach(Array('_GET','_POST','_COOKIE') as $_request)
{
         foreach($$_request as $_k => $_v) ${$_k} = _RunMagicQuotes($_v);
}

改为:
    foreach(Array('_GET','_POST','_COOKIE') as $_request)
    {
         foreach($$_request as $_k => $_v) {
                    if( strlen($_k)>0 && eregi('^(cfg_|GLOBALS)',$_k) ){
                            exit('Request var not allow!');
                   }
                    ${$_k} = _RunMagicQuotes($_v);
    }


问题解决
15063366547
286601999
微信咨询