冲上云霄2

ThinkPHP 5.x漏洞自查清单：你的后台还裸奔吗_我的网站

A |     

　    一键部署OpenClaw        

ThinkPHP是国内站长的老朋友，也是老漏洞的重灾区。5.x早期版本暴露过多次高危问题，比如远程代码执行、控制器任意调用。

B |     When Guddi was released in 1971, it made an instant star of Jaya Bachchan and also showed the world that the glamorous world of the movies wasn't so glamorous after all. Almost four years ago, actor Dharmendra spoke about why Guddi was made. He shared a clip from the film where Jaya Bachchan's character is seen expressing her love for him by looking at his pictures.  "We made the film Guddi, to make school girls and boys aware that the film (movie camera emoji) world is all false. Don’t get carried away. But in vain. I still say there is a big difference between craze and love," Dharmendra wrote in the caption.          Dharmendra played himself in Guddi while Jaya Bachchan played the role of a schoolgirl who has a crush on him. Guddi was directed by Hrishikesh Mukherjee and written by Gulzar.           He had also posted a picture of himself and Bachchan and captioned it: "Barson baad..... Apni Guddi ke saath......Guddi jo... kabhi badi fan theyn meri (Years later with my Guddi who was once my big fan).....A happy news......"                                                                 View this post on Instagram          A post shared by Dharmendra Deol (@aapkadharam)                              Dharmendra and Jaya Bachchan were also seen in Karan Johar's Rocky Aur Rani Kii Prem Kahani. The film also starred Alia Bhatt, Ranveer Singh and Shabana Azmi. He will now be posthumously seen in Ikkis, starring Amitabh Bachchan's grandson, Agastya Nanda.     The veteran actor, affectionately known as Bollywood’s He-Man and Dharam Paaji, passed away on November 24 at the age of 89. His passing leaves behind an unmatched legacy of over six decades. The actor, born as Dharmendra Singh Deol, breathed his last at his residence. He was admitted to Breach Candy hospital earlier this month due to respiratory complications.     Dharmendra is survived by his wife, actress Hema Malini, his first wife Prakash Kaur, and his children, including actors Sunny Deol and Bobby Deol, and daughters Esha Deol and Ahana Deol.          Also Read: Allu Arjun, Jr NTR, Chiranjeevi Pay Tributes to Dharmendra。最坑的是很多站上线后没再更新过框架，漏洞一直躺在那儿。    

     自查第一步是确认版本。

C | ThinkPHP 5.0.x/5.1.x低于特定小版本就要升级。先把composer.lock或者框架目录里的base.php版本号翻出来，再对照官方安全公告。    # 快速查看当前ThinkPHP版本    grep -r "VERSION" vendor/topthink/framework/src/think/App.php         # 或者看composer.lock    grep -A1 '"name": "topthink/framework"' composer.lock    

自查第二步是限制后台入口。

D | 把admin、manage这些路径用Nginx做IP白名单或者加HTTP基本认证，别让搜索引擎随便扫到。同时关闭debug模式，runtime目录禁止执行脚本。

E |     # Nginx中禁止访问敏感路径    location ~* ^/(application|extend|runtime|thinkphp|vendor)/ {        deny all;    }         # 禁止执行上传目录里的PHP    location ~* ^/upload/.*\.(php|php5|phtml)$ {        deny all;    }    

最后一条容易被忽略：不要用默认的应用名和入口。

F | 很多扫描器直接请求/index.php/admin/login或者/index.php?s=/admin，你把后台入口改名，就能挡住一大半批量攻击。    数据来源：ThinkPHP官方安全公告及topthink/framework GitHub仓库版本更新记录

申请创业报道，分享创业好点子。点击此处，共同探讨创业新机遇！。

Current article:http://lax6q0.minshixuanhabing.bond/news/20260826_248874.html

Published on:05:33:18