遊客站內搜尋的錯誤 - 52AV手機A片王|52AV.ONE

private function _xss_check() {0 ~- n0 _0 C. X7 K8 U6 Y) n
0 L1 o# g1 r! e$ g/ p
static $check = array('"', '>', '<', '\'', '(', ')', 'CONTENT-TRANSFER-ENCODING');+ _7 Z$ m1 |$ L4 k" V
3 J" d1 N" X. H& x
if(isset($_GET['formhash']) && $_GET['formhash'] !== formhash()) {4 q. N0 O' ?# v( \& u
system_error('request_tainting');
_7 ~' C$ B# Z& R$ n* v. z
}5 R5 ?" J, k F+ |' p
0 E$ I6 o1 a7 Z9 Q- Z
if($_SERVER['REQUEST_METHOD'] == 'GET' ) {
2 o1 W: p: W/ i9 M# P( j
$temp = $_SERVER['REQUEST_URI'];, a& C% |# v% x
} elseif(empty ($_GET['formhash'])) {/ s8 R0 D% V w3 e& p2 g
$temp = $_SERVER['REQUEST_URI'].file_get_contents('php://input');
; @6 j% W' V! I- J% u
} else {
. K {7 c0 J+ G1 ~
$temp = '';' }0 I2 f4 \0 d, `+ R# l2 o- O6 a6 y
}$ a3 |. a* A6 P
7 W2 a" d& r+ k' \, t' S: f i
if(!empty($temp)) {
3 g+ p7 u& r" N
$temp = strtoupper(urldecode(urldecode($temp)));) u) B& M' Z5 f0 y ^. H* X0 V* |
foreach ($check as $str) {: ]- S/ H2 J7 M- T) J! k
if(strpos($temp, $str) !== false) {. V4 |! o* D4 X5 y5 T3 g
system_error('request_tainting');) u# Y: ?7 v/ V! m0 s1 Q7 C- ?
}" z- T) I6 w# n. E% [" J
}
( N G: [- y3 S- U
}
! d7 `$ z$ {7 g% d7 o% }9 f( e% w
2 T) d! a) c% l5 d
return true;2 c. r- B3 W& W6 Q4 `
}

複製代碼

private function _xss_check() {
) C7 Q1 R# l; ]/ v1 n2 e0 |
$temp = strtoupper(urldecode(urldecode($_SERVER['REQUEST_URI'])));, x4 i$ t/ ~4 O# m+ Z
if(strpos($temp, '<') !== false || strpos($temp, '"') !== false || strpos($temp, 'CONTENT-TRANSFER-ENCODING') !== false) {
system_error('request_tainting');
" y" e m( y' _ w
}
9 A6 m! X7 Q8 {% h
return true;; }, I* T4 {- Y4 p
}

複製代碼