CZ
ce05680219
修复3个安全漏洞 (#15)
* 修复趣味盒未授权访问漏洞
趣味盒页面未做鉴权游客可以任意查看或发送内容
* 修复sql注入漏洞
* 修复sql注入 详见描述
代码第19行 if (!is_valid_id($class) && $class != 0)
如果class 为"sleep(5)" 虽然过不了is_valid_id校验 但是由于php 弱类型 非数字开头的字符串 最终会判断为 $class = 0 绕过了校验
另外建议is_valid_id 改为更直接的intval 将用户输入的的数据强制转换成int 防止sql注入
2021-05-19 13:49:41 +08:00
..
2021-03-02 21:03:02 +08:00
2021-01-13 19:32:26 +08:00
2021-05-15 19:29:44 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 16:40:15 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-05-01 02:02:01 +08:00
2021-03-03 19:29:29 +08:00
2021-02-22 17:55:53 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-04-21 19:54:50 +08:00
2021-03-31 03:17:33 +08:00
2021-03-25 18:30:23 +08:00
2021-03-18 02:01:12 +08:00
2021-01-13 19:32:26 +08:00
2021-03-01 19:44:16 +08:00
2021-02-02 20:27:37 +08:00
2021-01-19 17:35:05 +08:00
2021-01-13 19:32:26 +08:00
2021-04-21 00:07:32 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-02-22 17:55:53 +08:00
2021-02-02 20:27:37 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-05-14 11:04:03 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-05-14 11:04:03 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 03:17:33 +08:00
2021-05-14 01:00:59 +08:00
2021-01-13 19:32:26 +08:00
2021-03-30 00:03:10 +08:00
2021-03-18 20:32:35 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 03:17:33 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-04-21 00:07:32 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-02-02 20:27:37 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-05-19 13:49:41 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-05-05 22:28:19 +08:00
2021-03-01 09:47:45 +08:00
2021-01-13 19:32:26 +08:00
2021-03-05 02:07:06 +08:00
2021-05-11 02:44:43 +08:00
2021-01-19 17:35:05 +08:00
2021-01-13 19:32:26 +08:00
2021-02-02 20:27:37 +08:00
2021-02-02 20:27:37 +08:00
2021-05-07 02:33:17 +08:00
2021-02-02 20:27:37 +08:00
2021-05-13 21:31:09 +08:00
2021-01-13 19:32:26 +08:00
2021-01-14 20:44:24 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 03:17:33 +08:00
2021-04-21 00:07:32 +08:00
2021-02-02 20:27:37 +08:00
2021-05-19 13:49:41 +08:00
2021-05-15 03:21:06 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-04-21 00:07:32 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-04-02 19:48:41 +08:00
2021-02-02 20:27:37 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-02-02 20:27:37 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 03:17:33 +08:00
2021-01-13 19:32:26 +08:00
2021-01-19 00:55:34 +08:00
2021-04-02 19:48:41 +08:00
2021-01-13 19:32:26 +08:00
2021-03-18 20:32:35 +08:00
2021-02-02 20:27:37 +08:00
2021-01-13 19:32:26 +08:00
2021-03-16 23:28:37 +08:00
2021-03-18 02:01:12 +08:00
2021-05-15 12:59:59 +08:00
2021-01-13 19:32:26 +08:00
2021-02-26 19:27:48 +08:00
2021-03-31 03:17:33 +08:00
2021-01-13 19:32:26 +08:00
2021-01-25 01:23:28 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 03:17:33 +08:00
2021-02-02 20:27:37 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 03:17:33 +08:00
2021-03-30 00:03:10 +08:00
2021-02-28 02:57:50 +08:00
2021-03-31 03:17:33 +08:00
2021-02-04 19:28:27 +08:00
2021-01-13 19:32:26 +08:00
2021-05-11 02:44:43 +08:00
2021-05-19 13:49:41 +08:00
2021-03-31 03:17:33 +08:00
2021-03-17 01:21:35 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-03-31 03:17:33 +08:00
2021-05-14 01:20:41 +08:00
2021-05-15 12:59:59 +08:00
2021-05-14 11:04:03 +08:00
2021-01-13 19:32:26 +08:00
2021-03-17 19:38:33 +08:00
2021-01-13 19:32:26 +08:00
2021-05-14 00:31:37 +08:00
2021-01-13 19:32:26 +08:00
2021-02-28 02:15:11 +08:00
2021-05-15 03:21:06 +08:00
2021-01-13 19:32:26 +08:00
2021-01-19 17:35:05 +08:00
2021-02-02 20:27:37 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-13 19:32:26 +08:00
2021-01-19 21:50:21 +08:00
2021-02-22 17:55:53 +08:00
2021-03-21 21:02:55 +08:00
2021-03-31 03:17:33 +08:00
2021-04-02 19:48:41 +08:00