dedecms会员中心pm.php注入漏洞修复方法
路径：/member/pm.php解决方法，编辑pm.php找到以下代码：else if($dopost=='read') { $sql = "SELECT * FROM `#@__member_friends` WHERE mid='{$cfg_ml->M_ID}' AND ftype!='-1' ORDER BY addtime DESC LIMIT 20"; ……
织梦会员中心
dedecms会员中心mtypes.php注入漏洞修复方法
路径：/member/mtypes.php编辑mtypes.php，找到如下代码：elseif ($dopost == 'save') { if(isset($mtypeidarr) && is_array($mtypeidarr)) { $delids = '0'; $mtypeidarr = array_filter……