您现在的位置是：首页 > 后端 > PHP PHP

微擎-关于阿里云安全中心的Web-CMS漏洞

2021-09-03【PHP】824人已围观

简介微擎-关于阿里云安全中心的Web-CMS漏洞

### 微擎-关于阿里云安全中心的Web-CMS漏洞

> `web/source/extension/menu.ctrl.php`

```
找到（15行） if(checksubmit('submit')) {

----修改

# 在下面添加:
$_GPC['id'] = intval($_GPC['id']);
```

> `web/source/founder/display.ctrl.php`

```
找到 $founders = explode(',', $_W['config']['setting']['founder']);

----修改

# 其下添加:
$identity = uni_permission($_W['uid']);
if ($identity != ACCOUNT_MANAGE_NAME_FOUNDER && $identity != ACCOUNT_MANAGE_NAME_VICE_FOUNDER) {
    itoast('没有权限', referer(), 'error');
}
```

> `web/source/mc/fangroup.ctrl.php`

```
找到 $sql .= 'UPDATE ' . tablename('mc_mapping_fans') . " SET `groupid`='" . $tagids . "' WHERE `fanid`={$fans['fanid']};";

```

```
# 原代码
foreach ($buffer as $fans) {
	$tagids = trim(str_replace(','.$tagid.',', ',', $fans['groupid']), ',');
	if ($tagids == ',') {
		$tagids = '';
	}
	$sql .= 'UPDATE ' . tablename('mc_mapping_fans') . " SET `groupid`='" . $tagids . "' WHERE `fanid`={$fans['fanid']};";
	}
pdo_query($sql);

```

```
# 改为
for ($i = 0; $i < $buffSize; $i++) {
	$sql = '';
	$buffer = array_slice($fans_list, $i * 500, 500);
	foreach ($buffer as $fans) {
		$tagids = trim(str_replace(','.$tagid.',', ',', $fans['groupid']), ',');
		if ($tagids == ',') {
			$tagids = '';
		}
        $sql = 'UPDATE ' . tablename('mc_mapping_fans') . " SET `groupid`= :tagids WHERE `fanid`=:fanid;";
        pdo_query($sql,array(":tagids" => $tagids, ":fanid" => $fans['fanid']));
	}
}
```

> `web/source/paycenter/wxmicro.ctrl.php`

```
找到 if($post['member']['uid'] > 0) {

----修改

# 改为
if(intval($post['member']['uid']) > 0) {
```

> `web/source/site/editor.ctrl.php`

```
找到 if (!empty($nav)) {

----修改

# 其下添加
if (!empty($nav)) {
	$nav['id'] = intval($nav['id']);
```

关注博客，更多精彩分享，敬请期待！

Tags：微擎

很赞哦！ (0)

上一篇：Jetbrains PhpStorm 2020.1 完美版(附安装教程)