查看: 1754|回复: 2

请亲亲们法眼鉴定一下是否为马？ [复制链接]

书童

Rank: 1

电梯直达

1^#

酒之小轻 发表于 2012-3-23 21:21:54 |只看该作者 |倒序浏览

@eval($phpcode); //or die("<xmp>$phpcode</xmp>");
以上来自DEDE5.6  dedetag.class.php

@eval($phpcode);
以上来自DEDE5.6  php.lib.php

-------------------------------------------------------
                        割
-------------------------------------------------------

} elseif($setting['variable'] == 'creditsformula') {

if(!preg_match("/^([\+\-\*\/\.\d]|((extcredits[1-8]|digestposts|posts|pageviews|oltime)([\+\-\*\/]|$)+))+$/", $setting['value']) || !is_null(@eval(preg_replace("/(digestposts|posts|pageviews|oltime|extcredits[1-8])/", "\$\\1", $setting['value']).';'))) {

$setting['value'] = '$member[\'extcredits1\']';
以上来自dz 5.5 cache.func.php

-------------------------------------------------------
                        割
-------------------------------------------------------

} else {

if(!preg_match("/^([\+\-\*\/\.\d]|((extcredits[1-8]|digestposts|posts|pageviews|oltime)([\+\-\*\/]|$)+))+$/", $creditsformulanew) || !is_null(@eval(preg_replace("/(digestposts|posts|pageviews|oltime|extcredits[1-8])/", "\$\\1", $creditsformulanew).';'))) {

cpmsg('settings_creditsformula_invalid');
以上来自dz 5.5 creditwizard.inc.php

-------------------------------------------------------
                        割
-------------------------------------------------------

}

if(isset($settingsnew['creditsformula']) && isset($settingsnew['extcredits']) && isset($settingsnew['creditspolicy']) && isset($settingsnew['initcredits']) && isset($settingsnew['creditstrans']) && isset($settingsnew['creditstax'])) {
if(!preg_match("/^([\+\-\*\/\.\d]|((extcredits[1-8]|digestposts|posts|pageviews|oltime)([\+\-\*\/]|$)+))+$/", $settingsnew['creditsformula']) || !is_null(@eval(preg_replace("/(digestposts|posts|pageviews|oltime|extcredits[1-8])/", "\$\\1", $settingsnew['creditsformula']).';'))) {
cpmsg('settings_creditsformula_invalid');
以上来自dz 5.5 settings.inc.php