时间:2020-09-24

2.修改源码除了添加另一个变量之外,还可以看看官方的最新补丁使用到什么,通过查看6.7日官方更新补丁,织梦DedeCMS官方在6月7号的安全补丁主要更新文件是include/dedesql.class.php,修复变量覆盖漏洞。但是下面的这段代码明显是不正常的,为什么要用这种编码呢?删除该文件的下面这段代码就可以解决这个问题了。代码如下:
$arrs1=array(0x63,0x66,0x67,0x5f,0x70,0x6f,0x77,0x65,0x72,0x62,0x79);$arrs2=array(0x20,0x3c,0x61,0x20,0x68,0x72,0x65,0x66,0x3d,0x68,0x74,0x74,0x70,0x3a,0x2f,0x2f,0x77,0x77,0x77,0x2e,0x64,0x65,0x64,0x65,0x63,0x6d,0x73,0x2e,0x63,0x6f,0x6d,0x20,0x74,0x61,0x72,0x67,0x65,0x74,0x3d,0x27,0x5f,0x62,0x6c,0x61,0x6e,0x6b,0x27,0x3e,0x50,0x6f,0x77,0x65,0x72,0x20,0x62,0x79,0x20,0x44,0x65,0x64,0x65,0x43,0x6d,0x73,0x3c,0x2f,0x61,0x3e);
好听商标网在此声明:该文章内容转载自网络,目的是服务于好听商标网用户,让其获取更多更全的关于商标知识与信息。版权归原作者所有,我们尊重原创并饱含敬意。若有不妥,请联系告知修改或删除,谢谢。