Spam Command Execution defects in deep-throat cms system and repair

Brief description: One spam command can only execute one function without parameters. Please mine it yourself
Detailed description:
$ Controller = ABSPATH./content/. $ params [model]./index. php;

// Die ($ controller );

// Load the call Tag

If (file_exists (ABSPATH./content/index/common_call_label.php) require_once (ABSPATH./content/index/common_call_label.php );

// Var_dump ($ controller );

If (file_exists ($ controller ))

{

// Die (fuck );

Require_once ($ controller );

 

// Call if the Action is a comment Module

Require_once (ABSPATH./content/comment/index. php );

 

// Execute Action

Empty ($ params [action])? Index () :( function_exists ($ params [action])? $ Params [action] (): die ("this Action is not available # $ params [action]");

// Exit;

}
Search for index. php by yourself
Proof: http://www.bkjia.com: 8080 /? A = phpinfo

Solution: Filter