Your current location:Home > Latest news text

托业

ThinkPHP 5.x漏洞自查清单:你的后台还裸奔吗_我的网站

无间道三

A |     

A drone made of bamboo-based composite materials is seen in flight. Photo: official WeChat account of Long Bamboo
    A drone made of bamboo-based composite materials is seen in flight. Photo: official WeChat account of Long BambooA Chinese team has developed a drone using bamboo-based composite materials after making a breakthrough in a technique that allows bamboo to be flattened while preserving its tough outer layer. The drone has completed multiple test flights, China Central Television (CCTV) News reported.
Long Bamboo, a company based in East China's Fujian Province, developed the technique that preserves the bamboo's tough outer layer and allows different parts with different densities of the material to be used according to their properties, improving its overall performance.
In the past, the outer skin of bamboo was often treated as leftover material and eventually burned into low-value bamboo charcoal.
According to a company release in February, bamboo-based composites now make up more than 25 percent of the entire drone, while its fuselage skin is made entirely from the company's own high-performance bamboo composite material.
The bamboo-based material also offers a major cost advantage, costing only about one-quarter to one-tenth as much as aviation-grade carbon fiber. After the drone is retired, the material can naturally degrade, allowing it to effectively "come from nature and return to nature."
The team spent four years building data models, upgrading equipment and refining the material. The resulting drone has a wingspan of more than 2.5 meters but weighs only about 7 kilograms, and has already completed multiple test flights, according to CCTV News.
Bamboo was traditionally used mainly in products such as tableware and furniture. Now, however, the material is finding its way into a wider range of industrial applications. Bamboo fiber is being used in automobile interiors, while bamboo-based materials are also being explored as possible substitutes for plastics, glass fiber and carbon fiber in some applications. 
China has the world's largest bamboo resource base, with about 7.56 million hectares of bamboo forests nationwide. The country also ranks among the world leaders in bamboo resources, bamboo cultivation technologies and the development and utilization of bamboo materials, per CCTV News.
Global Times 

B |     

     一键部署OpenClaw        

ThinkPHP是国内站长的老朋友,也是老漏洞的重灾区。5.x早期版本暴露过多次高危问题,比如远程代码执行、控制器任意调用。最坑的是很多站上线后没再更新过框架,漏洞一直躺在那儿。    

     自查第一步是确认版本。ThinkPHP 5.0.x/5.1.x低于特定小版本就要升级。先把composer.lock或者框架目录里的base.php版本号翻出来,再对照官方安全公告。    # 快速查看当前ThinkPHP版本    grep -r "VERSION" vendor/topthink/framework/src/think/App.php         # 或者看composer.lock    grep -A1 '"name": "topthink/framework"' composer.lock    

自查第二步是限制后台入口。把admin、manage这些路径用Nginx做IP白名单或者加HTTP基本认证,别让搜索引擎随便扫到。

C | 同时关闭debug模式,runtime目录禁止执行脚本。    # Nginx中禁止访问敏感路径    location ~* ^/(application|extend|runtime|thinkphp|vendor)/ {        deny all;    }         # 禁止执行上传目录里的PHP    location ~* ^/upload/.*\.(php|php5|phtml)$ {        deny all;    }    

最后一条容易被忽略:不要用默认的应用名和入口。很多扫描器直接请求/index.php/admin/login或者/index.php?s=/admin,你把后台入口改名,就能挡住一大半批量攻击。    数据来源:ThinkPHP官方安全公告及topthink/framework GitHub仓库版本更新记录

        
    

申请创业报道,分享创业好点子。点击此处,共同探讨创业新机遇!。

D |

Current article:http://www.zhanggengsenchaiweikeng.cfd/list_5i45/otgl.html

Published on:08:56:45


Related reading
Copyright © 2020-2099 托业 All Rights Reserved 托业 Copyright