Discuz! X <= X3.2 front-end get SQL Injection Vulnerability (bypassing global WAF) patch solution

Analyzed Discuz! All versions of X are affected (Discuz! X <= X3.2 ). Currently, the official website only "secretly" fixes this vulnerability in the latest version (x3.2), but does not release announcements or upgrade reminders.

Solution:

Find in sourceincludemiscmisc_stat.php

 

$ Field = 'Daytime, ''. implode ('' + '', $ _ GET ['types']).'' AS statistic ';

 

And replace it

 

If (! Array_diff ($ _ GET ['types'], array_merge ($ cols ['login'], $ cols ['forum '], $ cols ['tgroup'], $ cols ['home'], $ cols ['space']) {

$ Field = 'Daytime, ''. implode ('' + '', $ _ GET ['types']).'' AS statistic ';

}