浏览 1933 次 / [ 天下网闻 ] DISCUZ：您当前的访问请求当中含有非法字符，已经被系统...
  • 发布时间 2014-02-25 15:23

    • 083442e8m7kz4k8q757m8s.png
    次DISCUZ X3 bug，

    查找目录source\class\discuz\discuz_application.php    private function _xss_check()

    350行左右


    1. private function _xss_check() {

    3. static $check = array('"', '>', '<', '\'', '(', ')', 'CONTENT-TRANSFER-ENCODING');

    5. if(isset($_GET['formhash']) && $_GET['formhash'] !== formhash()) {
    6. system_error('request_tainting');
    7. }

    9. if($_SERVER['REQUEST_METHOD'] == 'GET' ) {
    10. $temp = $_SERVER['REQUEST_URI'];
    11. } elseif(empty ($_GET['formhash'])) {
    12. $temp = $_SERVER['REQUEST_URI'].file_get_contents('php://input');
    13. } else {
    14. $temp = '';
    15. }

    17. if(!empty($temp)) {
    18. $temp = strtoupper(urldecode(urldecode($temp)));
    19. foreach ($check as $str) {
    20. if(strpos($temp, $str) !== false) {
    21. system_error('request_tainting');
    22. }
    23. }
    24. }

    26. return true;
    27. }
    复制代码
    替换为：

    1. private function _xss_check() {
    2. $temp = strtoupper(urldecode(urldecode($_SERVER['REQUEST_URI'])));
    3. if(strpos($temp, '<') !== false || strpos($temp, '"') !== false || strpos($temp, 'CONTENT-TRANSFER-ENCODING') !== false) {
    4. system_error('request_tainting');
    5. }
    6. return true;
    7. }
    复制代码

    签|2011-2026-版权声明|平台（网站）公约|DOOOOR 设计网 ( 吉ICP备2022003869号 )|吉公网安备 22240102000357号 |联系客服