近期有一些客戶網(wǎng)站出現(xiàn)一些問(wèn)題，無(wú)憂主機(jī)小編幫忙他查看，是掛了黑鏈，于是無(wú)憂小編幫忙進(jìn)行程序升級(jí)，但是詭異的是升級(jí)過(guò)后，”P(pán)ower by DedeCms”這個(gè)版權(quán)信息就會(huì)被添加到版權(quán)信息里面，起初無(wú)憂主機(jī)小編以為是模板里添加了，但是沒(méi)有找到。之后去后臺(tái)的版權(quán)修改，還有數(shù)據(jù)庫(kù)版權(quán)的表里面都沒(méi)有找到這串文字。 經(jīng)過(guò)排查這些常見(jiàn)的顯示的文件里都沒(méi)有這個(gè)版權(quán)的信息，那這個(gè)版權(quán)到底是如何出現(xiàn)的呢？ 原來(lái)升級(jí)過(guò)后，底部版權(quán)信息調(diào)用標(biāo)簽{dede:global.cfg_powerby/}就會(huì)會(huì)自動(dòng)加上織夢(mèng)官方 的鏈接[Power by DedeCms ]，而更新后有變化的文件無(wú)憂主機(jī)小編找到一遍，發(fā)現(xiàn)include/dedesql.class.php，修復(fù)變量覆蓋漏洞。但是下面的這段代碼明顯是不正常的，為什么要用這種編碼呢？刪除該文件的下面這段代碼就可以解決這個(gè)問(wèn)題了。代碼如下： $arrs1 = array(0x63,0x66,0x67,0x5f,0x70,0x6f,0x77,0x65,0x72,0x62,0x79);$arrs2 = array(0x20,0x3c,0x61,0x20,0x68,0x72,0x65,0x66,0x3d,0x68,0x74,0x74,0x70,0x3a,0x2f,0x2f, 0x77,0x77,0x77,0x2e,0x64,0x65,0x64,0x65,0x63,0x6d,0x73,0x2e,0x63,0x6f,0x6d,0x20,0x74,0x61,0x72, 0x67,0x65,0x74,0x3d,0x27,0x5f,0x62,0x6c,0x61,0x6e,0x6b,0x27,0x3e,0x50,0x6f,0x77,0x65,0x72,0x20, 0x62,0x79,0x20,0x44,0x65,0x64,0x65,0x43,0x6d,0x73,0x3c,0x2f,0x61,0x3e);  

本文地址：http://www.gle-technology.com/dedecms/14000.html