故障描述:
注销时,会出现错误“您当前的访问请求包含非法字符,并且已被系统拒绝”。如下图所示:
解决方法:
打开 \source
\class
\discuz
\discuz_application
.php
文件
找到
private
function
_xss_check
() {
system_error
(‘request_tainting
’);
}
if
($_SERVER
[‘REQUEST_METHOD
’] == ‘GET
’ ) {
$temp
= $_SERVER
[‘REQUEST_URI
’];
} elseif
(empty
($_GET
[‘formhash
’])) {
$temp
= $_SERVER
[‘REQUEST_URI
’].file_get_contents
(‘php
://input
’);
} else
{
$temp
= ”;
}
if
(!empty
($temp
)) {
$temp
= strtoupper
(urldecode
(urldecode
($temp
)));
foreach
($check
as
$str
) {
if
(strpos
($temp
, $str
) !== false
) {
system_error
(‘request_tainting
’);
}
}
}
return
true
;
}
修改为
private
function
_xss_check
() {
$temp
= strtoupper
(urldecode
(urldecode
($_SERVER
[‘REQUEST_URI
’])));
system_error
(‘request_tainting
’);
}
return
true
;
}
转载请注明:汇站网 » Discuz
“您当前的访问请求当中含有非法字符“的解决方法