目测 PHP5.3 LNMP下防跨站、跨目录没有效果

kiah

目测 PHP5.3 LNMP下防跨站、跨目录没有效果 我今天传了一个wenshell  貌似还是能看到所有目录   哎 怎么弄呀 一个网站挂马 导致全部网站全部被挂马

licess

发你的配置？按 https://www.vpser.net/security/l ... s-dir-security.html 弄的？

kiah

原帖由 licess 于 2013-7-12 10:12 发表
发你的配置？按 https://www.vpser.net/security/lnmp-cross-site-corss-dir-security.html 弄的？

我的php.ini末尾如下

1. [Zend Optimizer]
   
2. zend_extension=/usr/local/zend/ZendGuardLoader.so[HOST=www.souuji.com]
   
3. open_basedir=/home/wwwroot/www.souuji.com/:/tmp/
   
4. [PATH=/home/wwwroot/www.souuji.com]
   
5. open_basedir=/home/wwwroot/www.souuji.com/:/tmp/
   
6. [HOST=www.ihdbbs.com]
   
7. open_basedir=/home/wwwroot/www.ihdbbs.com/:/tmp/
   
8. [PATH=/home/wwwroot/www.ihdbbs.com]
   
9. open_basedir=/home/wwwroot/www.ihdbbs.com/:/tmp/
   
10. [HOST=www.kailoveshan.com]
    
11. open_basedir=/home/wwwroot/www.kailoveshan.com/:/tmp/
    
12. [PATH=/home/wwwroot/www.kailoveshan.com]
    
13. open_basedir=/home/wwwroot/www.kailoveshan.com/:/tmp/
    
14. [HOST=admin.ihdbbs.com]
    
15. open_basedir=/home/wwwroot/default/:/tmp/
    
16. [PATH=/home/wwwroot/default]
    
17. open_basedir=/home/wwwroot/default/:/tmp/
    
18. [HOST=www.hiqinglv.com]
    
19. open_basedir=/home/wwwroot/www.hiqinglv.com/:/tmp/
    
20. [PATH=/home/wwwroot/www.hiqinglv.com]
    
21. open_basedir=/home/wwwroot/www.hiqinglv.com/:/tmp/
    
22. [HOST=www.jgreatwall.com]
    
23. open_basedir=/home/wwwroot/www.jgreatwall.com/:/tmp/
    
24. [PATH=/home/wwwroot/www.jgreatwall.com]
    
25. open_basedir=/home/wwwroot/www.jgreatwall.com/:/tmp/
    
26. [HOST=ask.fsbbs.net]
    
27. open_basedir=/home/wwwroot/ask.fsbbs.net/:/tmp/
    
28. [PATH=/home/wwwroot/ask.fsbbs.net]
    
29. open_basedir=/home/wwwroot/ask.fsbbs.net/:/tmp/
    
30. [HOST=www.chinamajiangji.com]
    
31. open_basedir=/home/wwwroot/www.chinamajiangji.com/:/tmp/
    
32. [PATH=/home/wwwroot/www.chinamajiangji.com]
    
33. open_basedir=/home/wwwroot/www.chinamajiangji.com/:/tmp/
    
34. [HOST=www.lesongtv.com]
    
35. open_basedir=/home/wwwroot/www.lesongtv.com/:/tmp/
    
36. [PATH=/home/wwwroot/www.lesongtv.com]
    
37. open_basedir=/home/wwwroot/www.lesongtv.com/:/tmp/
    
38. [HOST=www.luqianjia.com]
    
39. open_basedir=/home/wwwroot/www.luqianjia.com/:/tmp/
    
40. [PATH=/home/wwwroot/www.luqianjia.com]
    
41. open_basedir=/home/wwwroot/www.luqianjia.com/:/tmp/

复制代码