国内流行的内容管理系统(CMS)多端全媒体解决方案 https://www.dedebiz.com
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

92 lines
3.8KB

  1. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  2. <html xmlns="http://www.w3.org/1999/xhtml">
  3. <head>
  4. <meta http-equiv="Content-Type" content="text/html; charset=<?php echo $cfg_soft_lang; ?>">
  5. <title>木马自检程序</title>
  6. <link rel="stylesheet" href="../static/css/bootstrap.min.css">
  7. <link href="../static/font-awesome/css/font-awesome.min.css" rel="stylesheet">
  8. <link href="css/base.css" rel="stylesheet" type="text/css" />
  9. <link rel="stylesheet" type="text/css" href="css/indexbody.css" />
  10. <style type="text/css">
  11. td {
  12. padding-left: 8px;
  13. }
  14. </style>
  15. <script language="javascript" src="../static/js/jquery.js"></script>
  16. <script language='javascript' src='js/main.js'></script>
  17. <script language="javascript" src="../static/js/dedeajax2.js"></script>
  18. <script language='javascript'>
  19. function LoadCtTest() {
  20. var filetype = $Obj('filetype').value;
  21. var info = $Obj('info').value;
  22. $Obj('loaddiv').style.display = 'block';
  23. var myajax = new DedeAjax($DE('messagetd'));
  24. myajax.SendGet2('sys_safetest.php?action=test&filetype=' + filetype + "&info=" + info);
  25. $Obj('loaddiv').style.display = 'none';
  26. }
  27. function LoadCtClear() {
  28. $Obj('loaddiv').style.display = 'block';
  29. var myajax = new DedeAjax($DE('messagetd'));
  30. myajax.SendGet2('sys_safetest.php?action=clear');
  31. $Obj('loaddiv').style.display = 'none';
  32. }
  33. </script>
  34. </head>
  35. <body leftmargin="8" topmargin="8" background='images/allbg.gif'>
  36. <div id='loaddiv' style='display:none'>
  37. <p align='center' style='padding-top:200px'><img src='images/loadinglit.gif' /> 请稍后,正在操作中...</p>
  38. </div>
  39. <div class="bodytitle mt-3">
  40. <div class="bodytitleleft"></div>
  41. <div class="bodytitletxt" style="padding-left:10px;">用户安全中心</div>
  42. </div>
  43. <?php echo $alter;?>
  44. <table width="98%" border="0" cellpadding="1" cellspacing="1" align="center" class="table maintable"
  45. style="background:#CFCFCF;">
  46. <tr>
  47. <td width="100%" height="26" colspan="2" bgcolor="#EDF9D5" background="images/tbg.gif" style="padding-left:10px;">
  48. <b>木马自检程序</b>
  49. </td>
  50. </tr>
  51. <tr>
  52. <td height="73" colspan="2" bgcolor="#FFFFFF">
  53. <strong>安全建议:</strong>
  54. <br />
  55. 1、有条件的用户把中 data、templets、uploads、html、special、images、install目录设置为不允许执行脚本,其它目录禁止写入,系统将更安全;<br />
  56. 2、本检测程以开发模式为标准,如果您的网站目录包含其它系统,此检测程序可能会产生错误判断;<br />
  57. 3、检测程序会跳过对模板缓存目录的检测,为了安全起见,检测完成后建议清空模板缓存。
  58. </td>
  59. </tr>
  60. <tr>
  61. <td height="50" colspan="2" bgcolor="#FFFFFF">
  62. <p>文件类型:
  63. <input name="filetype" type="text" id="filetype" value="php|inc" style="width:420px" />
  64. &nbsp;要检查的文件类型</p>
  65. <p>代码特征:
  66. <input name="info" type="text" id="info" value="eval|cmd|system|exec|_GET|_POST|_REQUEST|base64_decode" style="width:420px" />
  67. &nbsp;特征代码</p>
  68. </td>
  69. </tr>
  70. <tr>
  71. <td height="50" colspan="2" bgcolor="#FFFFFF">
  72. <button type="button" name="bt1" class="btn btn-success" onclick="LoadCtTest();">开始检测</button>
  73. &nbsp;
  74. <button type="button" name="bt2" class="btn btn-success" onclick="LoadCtClear();">清空模板缓存</button>
  75. </td>
  76. </tr>
  77. <tr>
  78. <td height="30" colspan="2" bgcolor="#F9FCEF">检测结果:(结果仅供参考,请务必查看源码后才删除非法文件)</td>
  79. </tr>
  80. <tr>
  81. <td height="300" colspan="2" id="messagetd" valign="top" bgcolor="#FFFFFF">
  82. </td>
  83. </tr>
  84. </table>
  85. </body>
  86. </html>