Community Learn Tools Library Leisure
search
English
Home > Backend Development > PHP Tutorial > 怎么能更好的解决PHP中fckeditor的上传木马的漏洞

怎么能更好的解决PHP中fckeditor的上传木马的漏洞

WBOY
Release： 2016-06-13 13:48:35
Original
982 people have browsed it

如何能更好的解决PHP中fckeditor的上传木马的漏洞。
大家知道FCK可以通过访问
http://www.XXX.com/admin/fckeditor/editor/filemanager/connectors/test.html
直接上传木马，怎么样才能更好的避免这漏洞呢？

网上查了很多，有说直接把上传文件功能禁止掉，但是这样文件上传有怎么弄？

有说二次开发，可本人还不会？

有高手知道，有啥更好的解决方法吗？

------解决方案--------------------
必须进行二次开发的。上传到正式服前把所有例子删掉。
看好fckconfig.js的说明，如果还不会，只能直接找人帮你写成品了。
------解决方案--------------------
如果需要定制的话，可以PM一下。

Related labels：
fckeditor filemanager connectors fckconfig editor
source：php.cn
Previous article： 小弟我做会员注册页面中的检查帐号是否重复中，有段代码看不懂 Next article： 换行符空格替换难题解决办法
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
function_exists() cannot determine the custom function Function test () {return true;} if (function_exists ('test')) {echo "test is function...
From 2024-04-29 11:01:01
0
3
2080
How to display the mobile version of Google Chrome Hello teacher, how can I change Google Chrome into a mobile version?
From 2024-04-23 00:22:19
0
11
2242
The child window operates the parent window, but the output does not respond. The first two sentences are executable, but the last sentence cannot be implemented.
From 2024-04-19 15:37:47
0
1
1888
There is no output in the parent window document.onclick = function(){ window.opener.document.write('I am the output of the child ...
From 2024-04-18 23:52:34
0
1
1767
Where is the courseware about CSS mind mapping? Courseware
From 2024-04-16 10:10:18
0
0
1805
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template