![]() |
|
修復PJblog2一處SQL過濾不嚴漏洞--修復tag錯誤
作者:nnickk 日期:2006-06-29 15:27
消息來源大陸官方網站。
修改common/function.asp
找 Function CheckStr(byVal ChkStr)
在 Str = Replace(Str,"""",""") 的後面多加一句 Str = Replace(Str,",",",")
找 Function UnCheckStr(ByVal Str)
在 Str = Replace(Str,""","""") 的後面多加一句 Str = Replace(Str,",",",")
此修改會造成新增、修改tag產生錯誤,
需一併修改class/cls_logaction.asp
找
tempTags=Split(CheckStr(logTags),",")
改成
tempTags=Split(logTags,",")
一共有兩處地方。
修改common/function.asp
找 Function CheckStr(byVal ChkStr)
在 Str = Replace(Str,"""",""") 的後面多加一句 Str = Replace(Str,",",",")
找 Function UnCheckStr(ByVal Str)
在 Str = Replace(Str,""","""") 的後面多加一句 Str = Replace(Str,",",",")
此修改會造成新增、修改tag產生錯誤,
需一併修改class/cls_logaction.asp
找
tempTags=Split(CheckStr(logTags),",")
改成
tempTags=Split(logTags,",")
一共有兩處地方。
- 1



