thinkPHP漏洞修复

thinkPHP 本身函数漏洞解决办法
1,nginx过滤url   (invokefunction|call_user_func_array|\\think\\)
2,thinkPHP App.php 374行添加
if (!preg_match('/^[A-Za-z](\w|\.)*$/', $controller)) {
            throw new HttpException(404, 'controller not exists:' . $controller);
        }
Strjson博客交流群QQ群:892570651
Vultr注册就送$50,可开日本/新加坡等机房,【点击注册
Last modification:December 18th, 2019 at 09:39 am
If you think my article is useful to you, please feel free to appreciate

Leave a Comment