把fsockopen函数替换成pfsockopen 函数,因为pfsockopen可保持keep-alive连接,使黑客无法持续性的攻击。
涉及到的dedecms文件有如下:
dedecms5.6有如下:
include/dedehttpdown.class.php
include/dedecollection.func.php:
include/mail.class.php
dede/module_main.php
dede/api_ucenter.php
dedecms5.7有如下:
include/dedehttpdown.class.php
include/sphinxclient.class.php
include/dedecollection.func.php:
include/mail.class.php
ask/data/scores.inc.php:
dede/module_main.php
dede/api_ucenter.php
plus/bshare.php
找到这些文件把其中的fsockopen替换成pfsockopen就可以了