Zhimeng CMS system-unlimited number of visitors on top

 

Brief description: Only DEDECMS V5.7 is tested, and the previous version is estimated to be the same.

A simple test conducted at the official address should be regarded as a small BUG, which can be used to infinitely refresh the top/step value of an article.

Detailed Description: although the front-end page has restrictions that visitors can only submit once, but there is no restriction on direct access by URL, as long as you press F5 not to release, it will be able to hundreds of thousands in a moment ....

In addition, the dede official team also has restrictions on this aspect. Www.2cto.com .. You know

Proof of vulnerability: http://www.dedecms.com/plus/feedback.php? Aid = 1102 & action = bad & fid = 1102

Http://www.dedecms.com/news/2011/1201/1102.html

 

Solution: add the feedback. php file to determine the interval between the submission times of a single IP address and the submission time.

Whether you change the IP address or not, an IP address record is retained for 24 hours, and the time is cleared.

 

Author SGKer