Discuz! System Error---您當前的訪問請求當中含有非法字符，已經被系統拒絕[含2張圖]

IT_man

5 u4 O0 x5 [0 w  u/ t" d2 e


8 w' f: K+ N9 ~8 d& Y7 k  x
5 h* I7 n( Z' Khttp://www.alexa.com/  蜘蛛收錄會產生如下的問題
0 ^3 Y2 A7 T. d' R# R# h# s" E

9 v7 ]3 B( [4 u* ^解決方法如下:
source\class\discuz的discuz_application.php找到

1. private function _xss_check() {
   ( {+ o, B. N6 Q7 e0 W; ]8 g% V' G
2. 
   1 ~" l: T( W- A+ d$ [  v
3.   static $check = array('"', '>', '<', '\'', '(', ')', 'CONTENT-TRANSFER-ENCODING');
   
4. 
   " K" D0 q. ?- c: V
5.   if(isset($_GET['formhash']) && $_GET['formhash'] !== formhash()) {
   1 }: y1 J6 H: i+ F0 D: g8 Q& I0 N
6.     system_error('request_tainting');
   
7.   }
   ! J' c: @+ d6 M
8. 
   ; S1 ^0 }7 ?1 s2 \+ E3 h. I
9.   if($_SERVER['REQUEST_METHOD'] == 'GET' ) {
   
10.     $temp = $_SERVER['REQUEST_URI'];
    8 L& d. J3 N& c' h' H
11.   } elseif(empty ($_GET['formhash'])) {
    
12.     $temp = $_SERVER['REQUEST_URI'].file_get_contents('php://input');
    
13.   } else {
    9 Y" j* A; p: D; z! z# v) q, ~
14.     $temp = '';
    
15.   }
    5 O* i1 m- ?. P8 `
16. 
    : t; s0 {" T: G  ]
17.   if(!empty($temp)) {
    
18.     $temp = strtoupper(urldecode(urldecode($temp)));
    & ?& K3 l. [+ J
19.     foreach ($check as $str) {
    ) I* W, s/ l# N
20.       if(strpos($temp, $str) !== false) {
    
21.       system_error('request_tainting');
    
22.     }
    
23.   }
    8 t3 u: Z% k& ]; h" E
24.                 }
    9 [4 o  ~8 _3 U
25. 
    
26.                 return true;

複製代碼

整段複製成:

1. private function _xss_check() {
   8 f& |7 G9 p( s6 ~; ~( `. V
2.                 $temp = strtoupper(urldecode(urldecode($_SERVER['REQUEST_URI'])));
   7 F' H" E" Z1 W# @3 L& W7 [
3.                 if(strpos($temp, '<') !== false || strpos($temp, '"') !== false || strpos($temp, 'CONTENT-TRANSFER-ENCODING') !== false) {
   ) a5 J3 v9 V% k! ^
4.                         system_error('request_tainting');
   
5.                 }
   
6.                 return true;
   ! b) U+ b8 p! k5 l) K, M. b5 @
7.         }

複製代碼

) ~, {, G, S: Z


1 J% i6 e7 u) r! Q5 o& I* e0 S