分享
  • 收藏
  • 举报
    X
    在调试模式的情况下移动端跳大咪咪
    91
    1

    之前没注意,有次开启调试模式处理问题发现移动端,微信访问会跳转到se站,检查发现是thinkphp/library/think/exception/Handle.php被植入黑链,大伙对比一下我提供的Handle.php文件如果不同的话就替换一下就欧克了。

    还有thinkphp/base.php这个文件检查一下,有部分站这个文件也会被篡改。

    <?php
    // +----------------------------------------------------------------------
    // | ThinkPHP [ WE CAN DO IT JUST THINK IT ]
    // +----------------------------------------------------------------------
    // | Copyright (c) 2006-2016 http://thinkphp.cn ;All rights reserved.
    // +----------------------------------------------------------------------
    // | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 ;)
    // +----------------------------------------------------------------------
    // | Author: yunwuxin <448901948@qq.com>
    // +----------------------------------------------------------------------
    
    namespace think\exception;
    
    use Exception;
    use think\App;
    use think\Config;
    use think\console\Output;
    use think\Lang;
    use think\Log;
    use think\Response;
    
    class Handle
    {
        protected $render;
        protected $ignoreReport = [
            "\\think\\exception\\HttpException",
        ];
    
        public function setRender($render)
        {
            $this->render = $render;
        }
    
        public function report(Exception $exception)
        {
            if (!$this->isIgnoreReport($exception)) {
                $data = [
                    "file"    => $exception->getFile(),
                    "line"    => $exception->getLine(),
                    "message" => $this->getMessage($exception),
                    "code"    => $this->getCode($exception),
                ];
                $log = "[{$data["code"]}]{$data["message"]}[{$data["file"]}:{$data["line"]}]";
    
                if (Config::get("record_trace")) {
                    $log .= "\r\n" . $exception->getTraceAsString();
                }
    
                Log::record($log, "error");
            }
        }
    
        protected function isIgnoreReport(Exception $exception)
        {
            foreach ($this->ignoreReport as $class) {
                if ($exception instanceof $class) {
                    return true;
                }
            }
            return false;
        }
    
        public function render(Exception $e)
        {
            if ($this->render && $this->render instanceof \Closure) {
                $result = call_user_func_array($this->render, [$e]);
                if ($result) {
                    return $result;
                }
            }
    
            if ($e instanceof HttpException) {
                return $this->renderHttpException($e);
            } else {
                return $this->convertExceptionToResponse($e);
            }
        }
    
        public function renderForConsole(Output $output, Exception $e)
        {
            if (App::$debug) {
                $output->setVerbosity(Output::VERBOSITY_DEBUG);
            }
            $output->renderException($e);
        }
    
        protected function renderHttpException(HttpException $e)
        {
            $status   = $e->getStatusCode();
            $template = Config::get("http_exception_template");
            if (!App::$debug && !empty($template[$status])) {
                return Response::create($template[$status], "view", $status)->assign(["e" => $e]);
            } else {
                return $this->convertExceptionToResponse($e);
            }
        }
    
        protected function convertExceptionToResponse(Exception $exception)
        {
            // 收集异常数据
            if (App::$debug) {
                // 调试模式,获取详细的错误信息
                $data = [
                    "name"    => get_class($exception),
                    "file"    => $exception->getFile(),
                    "line"    => $exception->getLine(),
                    "message" => $this->getMessage($exception),
                    "trace"   => $exception->getTrace(),
                    "code"    => $this->getCode($exception),
                    "source"  => $this->getSourceCode($exception),
                    "datas"   => $this->getExtendData($exception),
                    "tables"  => [
                        "GET Data"              => $_GET,
                        "POST Data"             => $_POST,
                        "Files"                 => $_FILES,
                        "Cookies"               => $_COOKIE,
                        "Session"               => isset($_SESSION) ? $_SESSION : [],
                        "Server/Request Data"   => $_SERVER,
                        "Environment Variables" => $_ENV,
                        "ThinkPHP Constants"    => $this->getConst(),
                    ],
                ];
            } else {
                // 部署模式仅显示 Code 和 Message
                $data = [
                    "code"    => $this->getCode($exception),
                    "message" => $this->getMessage($exception),
                ];
    
                if (!Config::get("show_error_msg")) {
                    // 不显示详细错误信息
                    $data["message"] = Config::get("error_message");
                }
            }
    
            while (ob_get_level() > 1) {
                ob_end_clean();
            }
    
            $data["echo"] = ob_get_clean();
    
            ob_start();
            extract($data);
            include Config::get("exception_tmpl");
            $content  = ob_get_clean();
            $response = new Response($content, "html");
    
            if ($exception instanceof HttpException) {
                $statusCode = $exception->getStatusCode();
                $response->header($exception->getHeaders());
            }
    
            if (!isset($statusCode)) {
                $statusCode = 500;
            }
            $response->code($statusCode);
            return $response;
        }
    
        protected function getCode(Exception $exception)
        {
            $code = $exception->getCode();
            if (!$code && $exception instanceof ErrorException) {
                $code = $exception->getSeverity();
            }
            return $code;
        }
    
        protected function getMessage(Exception $exception)
        {
            $message = $exception->getMessage();
            if (IS_CLI) {
                return $message;
            }
    
            if (strpos($message, ":")) {
                $name    = strstr($message, ":", true);
                $message = Lang::has($name) ? Lang::get($name) . strstr($message, ":") : $message;
            } elseif (strpos($message, ",")) {
                $name    = strstr($message, ",", true);
                $message = Lang::has($name) ? Lang::get($name) . ":" . substr(strstr($message, ","), 1) : $message;
            } elseif (Lang::has($message)) {
                $message = Lang::get($message);
            }
            return $message;
        }
    
        protected function getSourceCode(Exception $exception)
        {
            $line  = $exception->getLine();
            $first = ($line - 9 > 0) ? $line - 9 : 1;
    
            try {
                $contents = file($exception->getFile());
                $source   = [
                    "first"  => $first,
                    "source" => array_slice($contents, $first - 1, 19),
                ];
            } catch (Exception $e) {
                $source = [];
            }
            return $source;
        }
    
        protected function getExtendData(Exception $exception)
        {
            $data = [];
            if ($exception instanceof \think\Exception) {
                $data = $exception->getData();
            }
            return $data;
        }
    
        private static function getConst()
        {
            return get_defined_constants(true)["user"];
        }
    }



    0
    赏礼
    赏钱
    收藏
    点击回复
        全部留言
    • 1
    更多回复
        你可能感兴趣的主题
    恢复多功能编辑器
  • 3 1
  • 推荐内容
    扫一扫访问手机版
    请选择要切换的马甲:

     
    网页即时交流
    QQ咨询
    咨询热线
    020-28998648