代码拉取完成，页面将自动刷新
目前有利用空间最近访客在禁言等操作时不清空的漏洞，将名字显示在他人的个人空间中。同时还存在多处不清空的漏洞。
主要涉及以下代码中的表及记录（个别漏洞前期已提交修补，但大部分依旧存在），希望能优化解决方案：
目前代码修改方案：
1、upload/source/admincp/admincp_members.php
<li style="width: 8%;"><input type="checkbox" value="profile" name="clear[profile]" class="checkbox"> $lang[members_ban_delprofile]</li>
下增加
<li style="width: 8%;"><input type="checkbox" value="visitorall" name="clear[visitorall]" class="checkbox"> $lang[members_ban_delvisitorall]</li>
if(in_array('profile', $_GET['clear'])) {
上增加
//start by xingke
if(in_array('visitorall', $_GET['clear'])) {
DB::delete('home_visitor', "uid = ".$member['uid']." OR vuid = ".$member['uid']);
DB::delete('home_friend_request', "uid = ".$member['uid']." OR fuid = ".$member['uid']);
DB::delete('home_follow', "uid = ".$member['uid']." OR followuid = ".$member['uid']);
DB::delete('home_feed', "uid = ".$member['uid']);
DB::delete('home_notification', "authorid = ".$member['uid']." OR from_id = ".$member['uid']);
DB::delete('home_poke', "uid = ".$member['uid']." OR fromuid = ".$member['uid']);
DB::delete('home_pokearchive', "uid = ".$member['uid']." OR fromuid = ".$member['uid']);
DB::delete('ucenter_pm_lists', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_members', "uid = ".$member['uid']);
DB::delete('ucenter_pm_messages_0', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_1', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_2', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_3', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_4', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_5', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_6', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_7', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_8', "authorid = ".$member['uid']);
DB::delete('ucenter_pm_messages_9', "authorid = ".$member['uid']);
DB::delete('home_friend', "uid = ".$member['uid']." OR fuid = ".$member['uid']);
DB::delete('home_notification', "uid = ".$member['uid']);
DB::delete('forum_promotion', "uid = ".$member['uid']);
}
//end by xingke
2、 upload/source/language/lang_admincp.php
'members_ban_delprofile' => '用户资料',
下增加
'members_ban_delvisitorall' => '最近访客等',
以上方案请优化后提交更新。
老周部落
成员
建议您使用需求模板，不过也很感谢您的反馈，后续做一下。
此处可能存在不合适展示的内容，页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容，可点击提交进行申诉，我们将尽快为您处理。
老周部落
成员
登录 后才可以发表评论
