设为首页收藏本站
切换到宽版

Discuz!官方免费开源建站系统

 找回密码
 立即注册

QQ登录

只需一步，快速开始

搜索
Discuz!官方免费开源建站系统»论坛 › Discuz! 交流与讨论 › Discuz!-安装使用 › 您当前的访问请求当中含有非法字符，已经被系统拒绝 ...
返回列表 发新帖

[已解决] 您当前的访问请求当中含有非法字符，已经被系统拒绝

[复制链接]
gdgfgr 发表于 2015-2-5 20:28:05 | 显示全部楼层 |阅读模式
2015-02-05 20:16:29
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:member.php:0026 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=2; IP=42.236.185.196; RIP:42.236.185.196 Request: /member.php?mod=logging&action=login&loginsubmit=yes&handlekey=login&loginhash=Ly1UH&inajax=1
2015-02-05 20:15:05
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=101.226.66.172; RIP:101.226.66.172 Request: /plugin.php?id=yulegame_hdx&op=join&joinsubmit=true&formhash=3af307f0
2015-02-05 19:59:24
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:member.php:0026 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=2; IP=42.236.185.196; RIP:42.236.185.196 Request: /member.php?mod=logging&action=login&loginsubmit=yes&handlekey=login&loginhash=Lo4NZ&inajax=1
2015-02-05 19:58:36
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:admin.php:0025 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=101.226.65.102; RIP:101.226.65.102 Request: /admin.php?action=plugins&operation=enable&pluginid=55&formhash=6d3d820f
2015-02-05 19:52:03
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=54.201.178.31; RIP:54.201.178.31 Request: /search.php?mod=forum&srchtxt=discuz&formhash=c736947c&searchsubmit=true&source=hotsearch
2015-02-05 19:42:03
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=1.196.153.141; RIP:1.196.153.141 Request: /plugin.php?id=cloudsearch&formhash=88e26249&inajax=1&ajaxtarget=undefined
2015-02-05 19:42:03
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=1.196.153.141; RIP:1.196.153.141 Request: /search.php?mod=forum&srchtxt=discuz&formhash=88e26249&searchsubmit=true&source=hotsearch
2015-02-05 19:31:56
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=119.85.33.1; RIP:119.85.33.1 Request: /plugin.php?id=cloudsearch&formhash=b73a5cd7&inajax=1&ajaxtarget=undefined
2015-02-05 19:31:56
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=119.85.33.1; RIP:119.85.33.1 Request: /search.php?mod=forum&srchtxt=%BB%EE%B6%AF&formhash=b73a5cd7&searchsubmit=true&source=hotsearch
2015-02-05 19:20:37
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=101.226.89.115; RIP:101.226.89.115 Request: /plugin.php?id=hux_city:hux_city&mod=battle&ac=start&cid=battle&lv=1&formhash=775f6016
2015-02-05 19:20:04
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=115.47.4.17; RIP:115.47.4.17 Request: /search.php?mod=forum&srchtxt=%BB%EE%B6%AF&formhash=7f6144fd&searchsubmit=true&source=hotsearch
2015-02-05 19:09:13
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=211.149.187.68; RIP:211.149.187.68 Request: /plugin.php?id=cloudsearch&formhash=11b73be4&inajax=1&ajaxtarget=undefined
2015-02-05 19:04:44
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=39.1.8.37; RIP:39.1.8.37 Request: /search.php?mod=forum&srchtxt=discuz&formhash=11b73be4&searchsubmit=true&source=hotsearch
2015-02-05 18:53:33
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=1.63.104.79; RIP:1.63.104.79 Request: /plugin.php?id=cloudsearch&formhash=4e06150d&inajax=1&ajaxtarget=undefined
2015-02-05 18:53:30
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=192.227.218.4; RIP:192.227.218.4 Request: /search.php?mod=forum&srchtxt=%BD%BB%D3%D1&formhash=4e06150d&searchsubmit=true&source=hotsearch
2015-02-05 18:38:01
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=54.153.158.92; RIP:54.153.158.92 Request: /search.php?mod=forum&srchtxt=discuz&formhash=fed840cc&searchsubmit=true&source=hotsearch
2015-02-05 18:34:55
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:admin.php:0025 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=180.153.214.197; RIP:180.153.214.197 Request: /admin.php?action=plugins&operation=enable&pluginid=52&formhash=6d3d820f
2015-02-05 18:27:13
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=111.255.111.13; RIP:111.255.111.13 Request: /search.php?mod=forum&srchtxt=%BD%BB%D3%D1&formhash=241526be&searchsubmit=true&source=hotsearch
2015-02-05 18:20:02
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=115.218.183.124; RIP:115.218.183.124 Request: /plugin.php?id=cloudsearch&formhash=7ae30389&inajax=1&ajaxtarget=undefined
2015-02-05 18:16:49
您当前的访问请求当中含有非法字符，已经被系统拒绝
PHP:search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024
User: uid=0; IP=221.239.57.210; RIP:221.239.57.210 Request: /search.php?mod=forum&srchtxt=%BD%BB%D3%D1&formhash=3b12bfd6&searchsubmit=true&source=hotsearch
117 123... 6››
每页显示:

回复

使用道具 举报

 楼主| gdgfgr 发表于 2015-2-5 20:28:56 | 显示全部楼层
看不了帖子
回复

使用道具 举报

xiaoyuwxz 发表于 2015-2-5 20:44:02 | 显示全部楼层
\source\class\discuz的discuz_application.php
查找
        private function _xss_check() {

                static $check = array('"', '>', '<', '\'', '(', ')', 'CONTENT-TRANSFER-ENCODING');

                if(isset($_GET['formhash']) && $_GET['formhash'] !== formhash()) {
                        system_error('request_tainting');
                }

                if($_SERVER['REQUEST_METHOD'] == 'GET' ) {
                        $temp = $_SERVER['REQUEST_URI'];
                } elseif(empty ($_GET['formhash'])) {
                        $temp = $_SERVER['REQUEST_URI'].file_get_contents('php://input');
                } else {
                        $temp = '';
                }

                if(!empty($temp)) {
                        $temp = strtoupper(urldecode(urldecode($temp)));
                        foreach ($check as $str) {
                                if(strpos($temp, $str) !== false) {
                                        system_error('request_tainting');
                                }
                        }
                }

                return true;
        }


替换为：
        private function _xss_check() {
                $temp = strtoupper(urldecode(urldecode($_SERVER['REQUEST_URI'])));
                if(strpos($temp, '<') !== false || strpos($temp, '"') !== false || strpos($temp, 'CONTENT-TRANSFER-ENCODING') !== false) {
                        system_error('request_tainting');
                }
                return true;
        }


回复

使用道具 举报

crx349 发表于 2015-2-5 20:53:15 | 显示全部楼层
https://discuz.dismall.com/thread-3484417-1-1.html
回复

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

手机版|小黑屋|Discuz! 官方站 ( 皖ICP备16010102号 )star

GMT+8, 2024-11-26 07:52 , Processed in 0.024428 second(s), 4 queries , Gzip On, Redis On.

Powered by Discuz! X3.4

Copyright © 2001-2023, Tencent Cloud.

快速回复 返回顶部 返回列表