### [dedecms的变量覆盖漏洞导致注入漏洞怎么办](https://www.prosaas.cn/article/1251)

**Published:** 2020-01-10T01:39:39

**Author:** 5201314

**Excerpt:** dedecms的变量覆盖漏洞导致注入漏洞怎么办？dedecms的变量覆盖漏洞导致注入漏洞推荐学习：织梦cms文…

**![](//zhiqipro.oss-cn-beijing.aliyuncs.com/2023/12/20231212115606122.jpg)**

**dedecms的变量覆盖漏洞导致注入漏洞怎么办？**

dedecms的变量覆盖漏洞导致注入漏洞

推荐学习：织梦cms

文件是：include/filter.inc.php

防御方法

/include/filter.inc.php

/\*\*
 \*  过滤不相关内容
 \*
 \* @access    public
 \* @param     string  $fk 过滤键
 \* @param     string  $svar 过滤值
 \* @return    string
 \*/
$magic\_quotes\_gpc = ini\_get('magic\_quotes\_gpc');
function \_FilterAll($fk, &$svar)
{
    global $cfg\_notallowstr,$cfg\_replacestr;
    if( is\_array($svar) )
    {
        foreach($svar as $\_k => $\_v)
        {
            $svar\[$\_k\] = \_FilterAll($fk,$\_v);
        }
    }
    else
    {
        if($cfg\_notallowstr!='' && preg\_match("#".$cfg\_notallowstr."#i", $svar))
        {
            ShowMsg(" $fk has not allow words!",'-1');
            exit();
        }
        if($cfg\_replacestr!='')
        {
            $svar = preg\_replace('/'.$cfg\_replacestr.'/i', "\*\*\*", $svar);
        }
    }
    if (!$magic\_quotes\_gpc) {
        $svar = addslashes($svar);
    }
return addslashes($svar);
//    return $svar;
}

以上就是dedecms的变量覆盖漏洞导致注入漏洞怎么办的详细内容，更多请关注知企PROSAAS其它相关文章！

**Tags:** cms, DEDECMS, Filter, include, php

**Categories:** DEDECMS

---