{"id":199297,"date":"2025-05-03T09:55:43","date_gmt":"2025-05-03T01:55:43","guid":{"rendered":"https:\/\/server.hk\/cnblog\/199297\/"},"modified":"2025-05-03T09:55:43","modified_gmt":"2025-05-03T01:55:43","slug":"%e8%ae%a9ecshop%e7%ae%a1%e7%90%86%e5%91%98%e7%99%bb%e5%bd%95%e5%90%8e%e5%8f%b0%e5%90%8c%e6%97%b6%e6%94%af%e6%8c%81%e9%82%ae%e7%ae%b1%e4%b8%8e%e7%94%a8%e6%88%b7%e5%90%8d","status":"publish","type":"post","link":"https:\/\/server.hk\/cnblog\/199297\/","title":{"rendered":"\u8ba9ecshop\u7ba1\u7406\u5458\u767b\u5f55\u540e\u53f0\u540c\u65f6\u652f\u6301\u90ae\u7bb1\u4e0e\u7528\u6237\u540d"},"content":{"rendered":"

ecshop\u7ba1\u7406\u5458\u90ae\u7bb1\u7684\u552f\u4e00\u4f5c\u7528\u662f\u7528\u6765\u627e\u56de\u5bc6\u7801\uff0c\u9ed8\u8ba4\u53ea\u80fd\u4f7f\u7528\u7528\u6237\u540d(\u4e0d\u533a\u5206\u5927\u5c0f\u5199)\u548c\u5bc6\u7801\u767b\u5f55\uff0c\u5728\u9a8c\u8bc1\u7528\u6237\u540d\u548c\u5bc6\u7801\u4e4b\u524d\uff0c\u5bf9\u63d0\u4ea4\u7684\u8868\u5355\u57df\u8fdb\u884c\u5224\u65ad\uff0c\u5982\u679c\u8f93\u5165\u7684\u662f\u90ae\u7bb1\uff0c\u5219\u67e5\u8be2\u90ae\u7bb1\u5bf9\u5e94\u7684\u7528\u6237\u540d\u5e76\u8fdb\u884c\u8f6c\u6362\uff0c\u4ece\u800c\u767b\u5f55\u7cfb\u7edf\u3002<\/span><\/p>\n

<\/p>\n

\u5b9e\u73b0\u65b9\u6cd5\uff1a<\/p>\n

\u7f16\u8f91\/admin\/privilege.php\uff0c\u67e5\u627e\uff1a<\/span><\/p>\n

 <\/p>\n

$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n <\/span>
\n=<\/span>
\n <\/span>
\nisset<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n?<\/span>
\n <\/span>
\ntrim<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n:<\/span>
\n <\/span>
\n”<\/span>
\n;<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘password’<\/span>
\n]<\/span>
\n <\/span>
\n=<\/span>
\n <\/span>
\nisset<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘password’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n?<\/span>
\n <\/span>
\ntrim<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘password’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n:<\/span>
\n <\/span>
\n”<\/span>
\n;<\/span> <\/p>\n

 <\/p>\n

\u4e0b\u9762\u6dfb\u52a0\u201c\u90ae\u7bb1->\u7528\u6237\u540d\u201d\u8f6c\u6362\u4ee3\u7801\uff0c\u7ed3\u679c\u5982\u4e0b\uff1a<\/span><\/p>\n<\/p>\n

$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n <\/span>
\n=<\/span>
\n <\/span>
\nisset<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n?<\/span>
\n <\/span>
\ntrim<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n:<\/span>
\n <\/span>
\n”<\/span>
\n;<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘password’<\/span>
\n]<\/span>
\n <\/span>
\n=<\/span>
\n <\/span>
\nisset<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘password’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n?<\/span>
\n <\/span>
\ntrim<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘password’<\/span>
\n]<\/span>
\n)<\/span>
\n <\/span>
\n:<\/span>
\n <\/span>
\n”<\/span>
\n;<\/span>  
\n\/* \u90ae\u7bb1\u767b\u5f55 *\/<\/span>
\nif<\/span>
\n(<\/span>
\nis_email<\/span>
\n(<\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n)<\/span>
\n)<\/span>
\n{<\/span>
\n    <\/span>
\n$sql<\/span>
\n <\/span>
\n=<\/span>
\n <\/span>
\n“select user_name”<\/span>
\n <\/span>
\n.<\/span>
\n <\/span>
\n” FROM “<\/span>
\n <\/span>
\n.<\/span>
\n <\/span>
\n$ecs<\/span>
\n-><\/span>
\ntable<\/span>
\n(<\/span>
\n‘admin_user’<\/span>
\n)<\/span>
\n <\/span>
\n.<\/span>
\n <\/span>
\n” WHERE email = ‘”<\/span>
\n <\/span>
\n.<\/span>
\n <\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n <\/span>
\n.<\/span>
\n <\/span>
\n“‘”<\/span>
\n;<\/span>
\n    <\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n <\/span>
\n=<\/span>
\n <\/span>
\n$db<\/span>
\n-><\/span>
\ngetOne<\/span>
\n(<\/span>
\n$sql<\/span>
\n)<\/span>
\n;<\/span>
\n}<\/span>  
\n$sql<\/span>
\n=<\/span>
\n“SELECT `ec_salt` FROM “<\/span>
\n.<\/span>
\n <\/span>
\n$ecs<\/span>
\n-><\/span>
\ntable<\/span>
\n(<\/span>
\n‘admin_user’<\/span>
\n)<\/span>
\n <\/span>
\n.<\/span>
\n“WHERE user_name = ‘”<\/span>
\n <\/span>
\n.<\/span>
\n <\/span>
\n$_POST<\/span>
\n[<\/span>
\n‘username’<\/span>
\n]<\/span>
\n.<\/span>
\n“‘”<\/span>
\n;<\/span>
\n$ec_salt<\/span>
\n <\/span>
\n=<\/span>
\n$db<\/span>
\n-><\/span>
\ngetOne<\/span>
\n(<\/span>
\n$sql<\/span>
\n)<\/span>
\n;<\/span> <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

ecshop\u7ba1\u7406\u5458\u90ae\u7bb1\u7684\u552f\u4e00\u4f5c\u7528...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4925],"tags":[],"class_list":["post-199297","post","type-post","status-publish","format-standard","hentry","category-4925"],"_links":{"self":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/199297","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/comments?post=199297"}],"version-history":[{"count":0,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/199297\/revisions"}],"wp:attachment":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/media?parent=199297"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/categories?post=199297"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/tags?post=199297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}