Blog

29 Dec 2016

PHP Mailer Liberaries Kills lub website txhua feeb koj tsis nyeem tsab xov xwm no

Ib qho tseem ceeb heev uas tsis muaj txoj cai code tiav defenselessness ua tiav PHPMailer, ib qho kev tawm tsam nrawm tus mossycup ntoo qhib broadly siv PHP email xa qiv, Tej zaum yuav npaj ntau lab ntawm cov chaw Tshaj tawm ntawm kev thov kev nyiag nkas.

Cov kev txhaum ua kom pom tau tias muaj Kev ntseeg txog kev ruaj ntseg hu ua Dawid Golunski Dab tsi yog qhov kev txhim kho tshaj plaws yuav muaj nyob hauv PHPMailer 5. 2. 18, uas tej zaum yuav tau tawm sab nraud. Txawm li cas los, nws hloov tawm tias patavium tej zaum yuav tau tsis txaus Tsis tas li ntawd yuav ua bypassed.

Lub tsev qiv ntawv PHPMailer yuav raug siv tshwj xeeb los ntawm qhov kev tshwm sim Thaum kawg Tom ua rau tus xov tooj tseem ceeb saib xyuas kev lag luam (CMSs) nrog WordPress, Joomla Thiab Drupal. Qhov chaw hauv tsev qiv ntawv yuav tsis muab tso Ua ntej, lawv qhov chaw zov me nyuam, nws yuav raug yooj yim Txaus Siab Kev qhia Ib qho txawv dua lwm qhov yuav muab ntim nrog lwm tus neeg ntxiv.

Vim li no, cov neeg tsis txaus ntseeg qhov cam camwood txawv nrog lub website nrog lub website. Piv txwv, cov Joomla kev ruaj ntseg txoj kev koom tes tau hais tias cov Joomla JMail hoob kawm, uas nyob ntawm ib zaug PHPMailer, xav tau kev tso cai ntxiv uas khom ntawm kev siv cov lus tsis muaj tseeb.

Tus neeg txhaum yuav raug xa mus Txhaum cai tsis lees paub txog tus neeg xa email chaw nyob Cov ntaub ntawv kuj tseem tuaj yeem ua rau tus neeg raug nplua yuav ua phem rau hauv cov neeg ua haujlwm hauv qhov web site ntawm qhov chaw xaib xaib.

Txawm li cas los xij, kev tsim txom muaj nuj nqis rau thaj tsam ntawm lub website uas cov neeg ua hauj lwm PHPMailer yuav xa cov lus Tshaj tawm hauv cov txheej txheem xa email xa mus - qhov chaw uas zoo li hauv email header. Nws tsis tsim nyog li niaj zaus xws configurations yog, ntawm feem ntau qhov web manifestations coj tus sender email predefined Thiab zoo tshaj plaws daim ntawv tso cai neeg yuav tsum tau qhia lawv email chaw Zoo ib yam li Tus neeg txais kev pab.

"Txhua qhov chaw hauv lub chaw Joomla API uas xa cov ntawv xa mus rau qhov chaw nyob xa mus rau thoob ntiaj teb qhov teeb meem Tsis tas li ntawd tsis xav txog cov ntaub ntawv cov ntaub ntawv yuav tsum muaj caij nyoog nyob rau lwm qhov," Joomla kev ruaj ntseg kev koom tes tau hais rau ib daim ntawv tshaj tawm. "Txawm li cas los, extensions uas pob Ib qho txawv adaptation ntawm PHPMailer alternately tsis siv lub Joomla API nrog xa email tej zaum yuav muaj lub caij nyoog ua defenseless yuav tsum no qhov teeb meem. ".
Cov neeg tsim khoom tsim WordPress los ntawm Kev sib piv xaus, sau cia lawv tus kheej cov kab khiav haujlwm uas ua haujlwm nrog kev ua haujlwm hauv wp_mail () Ua tus WordPress code code tej zaum yuav tsis cuam tshuam rau nws tsis siv lub tswv yim tsis muaj zog PHPMailer. Thib peb cov plug-ins uas siv wp_mail () zoo yuav tsum tsis pom tseeb los ntawm kev tsis sib haum, tab sis qhov kev tshaj tawm mus rau kev sib txuas nrog qee zaum yuav muaj nyob hauv kev kuaj xyuas.

"Tus xa 4. 7. 1 cov sij hawm tuaj txog yuav muaj kev pab ntau heev rau cov teeb meem no, "WordPress tus thawj coj ua Dion Hulse hais tias. "Peb tau xa nrog shipping shipping qiv rau WordPress - nyob rau hauv txhua rooj plaub rau yog tias peb siv tus yam ntxwv los yog tsis. ".
Drupal kev ruaj ntseg pawg zoo li no tau tsim tawm Kev ruaj ntseg tsab ntawv ceeb toom rau qhov teeb meem no Tshaj li qhov kev soj ntsuam nws yog qhov tseem ceeb, txawm tias qhov tseeb Drupal qhov chaws code yuav tsis cuam tshuam rau nws qhov kev tshwm sim tom Tom ua rau tus neeg ua tsis zoo.

"Vim tias qhov tseem ceeb heev rau qhov teeb meem no thiab lub sij hawm ntawm nws qhov kev tso tawm peb tau tawm Ib qho kev pabcuam pejxeem cov ntaub ntawv tshaj tawm nrog ceeb toom tej zaum cuam tshuam Drupal cov chaw tuav," cov kev koom tes said.

Nyob rau hauv qhov kev xam pom ntawm camwood yuav tsum tau tso cai thiab cov pejxeem txoj cai siv tsis tau, cov neeg muaj kev tsis txaus siab yuavtsum tau xoom-hnub raws li - nws yuav raug xa mus rau thiab tsis tsimnyog. Txuas ntxiv, qhov ncaj cov teebmeem tshwm sim ntawm lub website mus rau lub website, rov qab siv PHPMailer li cas, nws tsis yooj yim mus rau webmasters yuav daws qhov teeb meem tsis muaj kev ntsuam xyuas ceev faj.

Piv txwv tias lawv siv PHPMailer straightforwardly Yav dhau los, lawv lub website qhov chaws, lawv yuav tsum tau kho dua lub tsev qiv ntawv ntawm lub patchcord feem ntau tsis ntev los no ua rau sai li Txiaj nws li nws tawm. Lawv yuav tsum ntxiv ntxiv kom paub ntxiv seb qhov twg los xij rau lawv qhov chaw sib tiv tauj, tawm tswv yim, sau npe, email rov qab Tau ntau hom kev sib tham rau cov kev pabcuam ntawm kev tiv thaiv tsis pub siv phoo ntawv PHPMailer Dab tsi ntau dua yog tias tus neeg tseem ceeb muaj peev xwm paub cov neeg xa email chaw nyob.

Thaum lawv siv cov txheej txheem kev tswj xyuas cov khoom lag luam lawv yuav tsum tau ntxiv qhov ntsuas qhov nws lub vev xaib ntawm daim duab tawm ntawm seb nws cov kev cuam tshuam nrog nws cov teeb meem tsis sib haum. Tom qab ntawd lawv yuav tsum tau asses cov sway rau ib yam Ntawm txhua tus thib peb tog plug-ins hloov modules uas lawv xav tau tswvcuab Ntxiv uas yuav siv PHPMailer rau lawv tus kheej.

&bsp

GTranslate Your license is inactive or expired, please subscribe again!