dedecms 会员漏洞

// 示例代码：使用PDO防止SQL注入
$pdo = new PDO('mysql:host=localhost;dbname=test', 'username', 'password');
$stmt = $pdo->prepare('SELECT * FROM users WHERE id = :id');
$stmt->bindParam(':id', $userId, PDO::PARAM_INT);
$stmt->execute();
$result = $stmt->fetchAll(PDO::FETCH_ASSOC);

// 示例代码：HTML转义
function escapeHtml($string) {
    return htmlspecialchars($string, ENT_QUOTES | ENT_HTML5, 'UTF-8');
}

// 示例代码：生成和验证CSRF令牌
session_start();
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrfToken = $_SESSION['csrf_token'];

// 在表单中添加隐藏字段
<input type="hidden" name="csrf_token" value="<?php echo $csrfToken; ?>">

// 验证CSRF令牌
if ($_POST['csrf_token'] !== $_SESSION['csrf_token']) {
    die('Invalid CSRF token');
}

// 示例代码：文件上传安全检查
if ($_FILES['file']['error'] === UPLOAD_ERR_OK) {
    $fileType = $_FILES['file']['type'];
    $allowedTypes = ['image/jpeg', 'image/png', 'application/pdf'];
    if (in_array($fileType, $allowedTypes)) {
        $uploadPath = '/uploads/' . basename($_FILES['file']['name']);
        if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadPath)) {
            echo 'File uploaded successfully';
        } else {
            echo 'Failed to move uploaded file';
        }
    } else {
        echo 'Invalid file type';
    }
} else {
    echo 'File upload error';
}