apache
在.htaccess写规则如
RewriteCond %{HTTP:Content-Type} multipart [NC]
RewriteCond %{THE_REQUEST} !(?=.*\s/jia/index\.php\?)(?=.*[?&]mod=fun(?:&|\s))(?=.*[?&]act=upload(?:&|\s)).* [NC]
RewriteCond %{THE_REQUEST} !(?=.*\s/jia/index\.php\?)(?=.*[?&]mod=tradelist(?:&|\s))(?=.*[?&]act=import(?:&|\s)).* [NC]
RewriteCond %{REQUEST_URI} !/jian/kindeditor/php/upload_json\.php [NC]
RewriteRule ^ - [F,L]
另外 关闭session.upload_progress直接砍掉漏洞利用链
能防范吗
|
|