sys_safetest.php
3.83 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
<?php
/**
* 安全检测
*
* @version $Id: sys_safetest.php 2 9:25 2010-11-12 tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once(dirname(__FILE__).'/config.php');
CheckPurview('sys_Edit');
if(empty($action)) $action = '';
if(empty($message)) $message = '尚未进行检测……';
if(empty($filetype)) $filetype = 'php|inc';
if(empty($info)) $info = 'eval|cmd|_GET|_POST';
$safefile = "data/common.inc.php
index.php
dede/config.php
dede/index_body.php
dede/member_do.php
dede/sys_info_pay.php
dede/mychannel_main.php
group/postform.php
group/reply.php
include/common.inc.php
include/mail.class.php
include/Lurd.class.php
include/payment/alipay.php
include/payment/bank.php
include/payment/cod.php
include/payment/yeepay.php
include/helpers/debug.helper.php
include/request.class.php
include/dedecollection.class.php
include/dedetag.class.php
include/dialog/config.php
include/taglib/php.lib.php
include/FCKeditor/fckeditor.php
include/smtp.class.php
include/zip.class.php
install/common.inc.php
include/json.class.php
include/sphinxclient.class.php
plus/bshare.php
install/index.php";
$adminDir = preg_replace("#(.*)[\/\\\\]#", "", dirname(__FILE__));
$safefile = trim(str_replace('dede/',$adminDir.'/',$safefile));
$safefiles = preg_split("#[\r\n]{1,}#", $safefile);
function TestOneFile($f)
{
global $message, $info;
$str = '';
//排除safefile和data/tplcache目录
if(NotCheckFile($f) || preg_match("#data/tplcache|.svn#", $f)) return -1;
$fp = fopen($f, 'r');
while(!feof($fp)) { $str .= fgets($fp,1024); }
fclose($fp);
if(preg_match("#(".$info.")[ \r\n\t]{0,}([\[\(])#i", $str))
{
$trfile = preg_replace("#^".DEDEROOT."#", '', $f);
$message .= "<div style='clear:both;border-bottom:1px dotted #B8E6A2;line-height:24px'>
<div style='width:350px;float:left'>可疑文件：{$trfile}</div>
<div style='float:left'>[<a href='file_manage_view.php?fmdo=del&filename=$trfile&activepath=' target='_blank'><u>删除</u></a>]
[<a href='file_manage_view.php?fmdo=edit&filename=$trfile&activepath=' target='_blank'><u>查看源码</u></a>]
</div></div>\r\n";
return 1;
}
return 0;
}
function NotCheckFile($f)
{
global $safefiles, $safefile;
if($safefile != '')
{
foreach($safefiles as $v)
{
//if(empty($v)) continue;
if( preg_match("#".$v."#i", $f) ) return TRUE;
}
}
return false;
}
function TestSafe($tdir)
{
global $filetype;
$dh = dir($tdir);
while($fname=$dh->read())
{
$fnamef = $tdir.'/'.$fname;
if(@is_dir($fnamef) && $fname != '.' && $fname != '..')
{
TestSafe($fnamef);
}
if(preg_match("#\.(" . $filetype . ")#i", $fnamef))
{
TestOneFile($fnamef);
}
}
}
//检测
if($action=='test')
{
$message = '';
AjaxHead();
TestSafe(DEDEROOT);
if($message=='') $message = "<font color='green' style='font-size:14px'>没发现可疑文件！</font>";
echo $message;
exit();
}
//清空模板缓存
else if($action=='clear')
{
global $cfg_tplcache_dir;
$message = '';
$d = DEDEROOT.$cfg_tplcache_dir;
AjaxHead();
sleep(1);
if(preg_match("#data\/#", $cfg_tplcache_dir) && file_exists($d) && is_dir($d))
{
$dh = dir($d);
while($filename = $dh->read())
{
if($filename=='.'||$filename=='..'||$filename=='index.html') continue;
@unlink($d.'/'.$filename);
}
}
$message = "<font color='green' style='font-size:14px'>成功清空模板缓存！</font>";
echo $message;
exit();
}
include(dirname(__FILE__).'/templets/sys_safetest.htm');