phpwind防黑

phpwind防黑（本文主要讲解phpwind安装后出现的一些防黑问题）

大家都知道模板被黑是最头疼的事情了，那么Phpwind v9.0如何预防被黑呢！

进入到public html找到src/service/design/srv/PwDesignImportZip.php 找到如下代码：
 

foreach ($fileData AS &$_file) { $ext = strrchr($_file['filename'], "."); if($ext != $this->_tplExt) continue; $_file['data'] = $this->replaceTpl($_file['data']); $_file['data'] = $this->compileStyle($_file['data']); if ($_file['data']) $_isTpl = true; } WindFile::del($filename);

将如上的代码删除替换成为如下代码：
 

foreach ($fileData AS &$_file) { $ext = strrchr($_file['filename'], "."); if($ext != $this->_tplExt) continue; //fixed,http://www.wooyun.org/bugs/wooyun-2010-064984/ $_file['data'] = $this->filterTemplate($_file['data']); $_file['data'] = $this->replaceTpl($_file['data']); $_file['data'] = $this->compileStyle($_file['data']); if ($_file['data']) $_isTpl = true; } WindFile::del($filename);

建议大家将这个漏洞补上以防万一！