search

forget-code / zzcms

zzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了v7.0~2019的版本，官网最新版下载地址：http://www.zzcms.net/about/6.htm
http://www.zzcms.net/
4 stars 5 forks source link

By disabling JavaScript to bypass administrator authentication restrictions #1

Open rpsate opened 2 years ago

rpsate commented 2 years ago

The administrator authentication code in admin/admin.php is as follows image admin/admin.php is the web application administrator authentication page. When the identity authentication fails, it will jump to the login page. There is a problem with the jump code on line 15 of admin/admin.php. The page is redirected through JavaScript, but the program execution is not stopped immediately after the jump. So after disabling JavaScript, you can directly access the administrator console.

YuanEF commented 2 years ago

波哥nb

fateiceb commented 2 years ago

NB

frankli0324 commented 2 years ago

现在的编号这么容易骗的么