急求高手查看网站漏洞

lancoo · 发表于 2009-12-20 17:10:24

我在注册用户的时候

注册成功以后，出现这个……

<?xml version="1.0" encoding="gbk" ?>
- <root>
- <![CDATA[ <a href="http://www.linzfc.com/?action-login">注册成功了<script>setTimeout("window.location.href ='http://www.linzfc.com/?action-login';", 1000);</script></a>
]]>
</root>

复制代码

求高手给看看

下面是注册模板

[code]<?exit?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=$_SC[charset]" />
<title>$title $_SCONFIG[seotitle] - Powered by SupeSite</title>
<meta name="keywords" content="$keywords $_SCONFIG[seokeywords]" />
<meta name="description" content="$description $_SCONFIG[seodescription]" />
<meta name="generator" content="SupeSite 7.0.0" />
<meta name="author" content="SupeSite Team and Comsenz UI Team" />
<meta name="copyright" content="2001-2009 Comsenz Inc." />
<link rel="stylesheet" type="text/css" href="{S_URL}/templates/$_SCONFIG[template]/css/common.css" />
$_SCONFIG[seohead]
<script type="text/javascript">
var siteUrl = "{S_URL}";
</script>
<script src="{S_URL}/include/js/ajax.js" type="text/javascript" language="javascript"></script>
<script src="{S_URL}/include/js/common.js" type="text/javascript" language="javascript"></script>
<script type="text/javascript" src="{S_URL}/templates/$_SCONFIG[template]/js/common.js"></script>
</head>

<body>
<div id="ajaxwaitid"></div>
<div id="append_parent"></div>
<div id="header">
<h2><a href="{S_URL}/"><img src="{S_URL}/images/logo.gif" alt="$_SCONFIG[sitename]" /></a></h2>
</div>

<div id="nav">

lancoo · 发表于 2009-12-20 17:17:26

没有人处理吗

SSAY · 发表于 2009-12-20 17:29:18

这样看没问题!!~~~

		自动登录	找回密码
密码			立即注册

[疑难] 急求高手查看网站漏洞