情
情深深
目前很多站长提供下载的江湖社区,多数没有过滤掉\x3c、\x3e、\74、\75这样的八位字符,那么在聊天室里面如果使用这样的语法
\x3cfont style=font:300pt\x3e\(大家好)
或者
\74FONT STYLE\75FONT-SIZE:1000\76(大家好)
那么效果就是聊天室里面出现大字、彩色字;其中300pt和size:1000是字体的大小,同样道理,可以发送图片、死循环炸弹、蓝屏炸弹。
补救办法:
如果您使用的是1.13以下版本,就找寻跟目录下(——也许是/chat目录下,我记不清楚了)func.inc,在里面添加折断代码:
says=Replace(says,"<"," ")
says=Replace(says,">"," ")
says=Replace(says,"\x3c"," ")
says=Replace(says,"\x3e"," ")
says=Replace(says,"\74"," ")
says=Replace(says,"\75"," ")
says=Replace(says,"\76"," ")
如果使用1.14版本,就到/chat下面,使用记事本打开say.asp,把上面的代码加到这段代码前面:
says=Replace(says,"[tu]1[/tu]","
")
says=Replace(says,"[tu]2[/tu]","
")
然后试验一下,怎么样?搞定了?嘿嘿,不要高兴得太早,还有其他更让你头疼的!
")
says=Replace(says,"[tu]2[/tu]","
")
然后试验一下,怎么样?搞定了?嘿嘿,不要高兴得太早,还有其他更让你头疼的!