One Bug of DEDECMS

Home > IT > One Bug of DEDECMS

One Bug of DEDECMS

December 30th, 2008 Iron_Feet Leave a comment Go to comments Short URL

这几天又在折腾网站和DEDECMS。今天巨崩溃的发现了DEDECMS的连载模块的一个大Bug
在连载模块的添加书本内容只要加入引号就会出现错误
比方说

<img src="../uploads/1.jpg" />

就会变成这个样子

<img src=\\\"../uploads/1.jpg\\\" />

然后就导致很多标签失效和出错。
初步看应该是CMS的二次转义的错误，显示把”转移成了\”，然后第二次转义成了\\\”，就成了那个样子。
而且DEDECMS的连载模块，竟然不是将书本内容放入数据库而是保存成一个一个文本，我Faint，害我找了好久。
后来看了DEDECMS的源代码半天，终于找到了比较方便的解决方法。在保存书本内容和读取书本内容的部分做一下手脚，基本搞定问题
在DEDECMS的文件夹下面找到include/inc_bookfunctions.php文件
原来是

<?php
 
function GetBookText($cid)
{
	global $cfg_cmspath,$cfg_basedir;
	$ipath = $cfg_cmspath."/data/textdata";
	$tpath = ceil($cid/5000);
	$bookfile = $cfg_basedir."$ipath/$tpath/bk{$cid}.php";
	if(!file_exists($bookfile)) return '';
	else{
		$alldata = '';
		$fp = fopen($bookfile,'r');
		$line = fgets($fp,64);
		$alldata = '';
		while(!feof($fp)){
			$alldata .= fread($fp,1024);
		}
		fclose($fp);
		return trim(substr($alldata,0,strlen($alldata)-2));
	}
}
 
function WriteBookText($cid,$body)
{
	global $cfg_cmspath,$cfg_basedir;
	$ipath = $cfg_cmspath."/data/textdata";
	$tpath = ceil($cid/5000);
	if(!is_dir($cfg_basedir.$ipath)) MkdirAll($cfg_basedir.$ipath,$GLOBALS['cfg_dir_purview']);
	if(!is_dir($cfg_basedir.$ipath.'/'.$tpath)) MkdirAll($cfg_basedir.$ipath.'/'.$tpath,$GLOBALS['cfg_dir_purview']);
	$bookfile = $cfg_basedir.$ipath."/{$tpath}/bk{$cid}.php";
	$body = "<"."?php exit();\r\n".$body."\r\n?".">";
	@$fp = fopen($bookfile,'w');
	@flock($fp);
	@fwrite($fp,$body);
	@fclose($fp);
}
 
?>

改成这个

<?php
 
function GetBookText($cid)
{
	global $cfg_cmspath,$cfg_basedir;
	$ipath = $cfg_cmspath."/data/textdata";
	$tpath = ceil($cid/5000);
	$bookfile = $cfg_basedir."$ipath/$tpath/bk{$cid}.php";
	if(!file_exists($bookfile)) return '';
	else{
		$alldata = '';
		$fp = fopen($bookfile,'r');
		$line = fgets($fp,64);
		$alldata = '';
		while(!feof($fp)){
			$alldata .= fread($fp,1024);
		}
		fclose($fp);
		return str_replace("\\\\\\", "", trim(substr($alldata,0,strlen($alldata)-2)));
	}
}
 
function WriteBookText($cid,$body)
{
	global $cfg_cmspath,$cfg_basedir;
	$ipath = $cfg_cmspath."/data/textdata";
	$tpath = ceil($cid/5000);
	if(!is_dir($cfg_basedir.$ipath)) MkdirAll($cfg_basedir.$ipath,$GLOBALS['cfg_dir_purview']);
	if(!is_dir($cfg_basedir.$ipath.'/'.$tpath)) MkdirAll($cfg_basedir.$ipath.'/'.$tpath,$GLOBALS['cfg_dir_purview']);
	$bookfile = $cfg_basedir.$ipath."/{$tpath}/bk{$cid}.php";
	$body = "<"."?php exit();\r\n".$body."\r\n?".">";
	$body = str_replace("\\\\\\", "",$body);
	@$fp = fopen($bookfile,'w');
	@flock($fp);
	@fwrite($fp,$body);
	@fclose($fp);
}
 
?>

修改是

$ diff inc_bookfunctions.php inc_bookfunctions_bak.php 
19c19
< 		return str_replace("\\\\\\", "", trim(substr($alldata,0,strlen($alldata)-2)));
---
> 		return trim(substr($alldata,0,strlen($alldata)-2));
32d31
< 	$body = str_replace("\\\\\\", "",$body);