dedecms /include/common.inc.php ，SESSION变量覆盖导致SQL注入漏洞修复方法

受影响的文件路径为：/include/common.inc.php

我们打开文件，大概在第101行，源代码如下：

foreach(Array(‘_GET’,’_POST’,’_COOKIE’) as $_request)

{

foreach($$_request as $_k => $_v)

{

if($_k == ‘nvarname’) ${$_k} = $_v;

else ${$_k} = _RunMagicQuotes($_v);

}

}

或者源代码为：

foreach(Array(‘_GET’,’_POST’,’_COOKIE’) as $_request)

{

foreach($$_request as $_k => $_v) ${$_k} = _RunMagicQuotes($_v);

}

将代码修改为：

foreach(Array(‘_GET’,’_POST’,’_COOKIE’) as $_request)

{

foreach($$_request as $_k => $_v) {

if( strlen($_k)>0 && eregi(‘^(cfg_|GLOBALS)’,$_k) ){

exit(‘Request var not allow!’);

}

${$_k} = _RunMagicQuotes($_v);

}

}

保存上传即可。