dedecms has recently been exposed as having a very large number of security vulnerabilities. Recently, some users reported that although the backend administrator account password had not been changed, they could not log in normally, and a prompt said the username does not exist. After investigation, it was found that this is due to a program vulnerability and the administrator was directly tampered with. The solution is as follows.

1. Please first use phpmyadmin to log in to mysql management. For virtual hosting, you can click Database on the left side of the control panel, then click Online Manage mysql Database to enter phpmyadmin to manage the database

After logging in, check whether the user in the dede_admin table has been tampered with to spider  Click Edit, directly change spider to the administrator you need, and replace pwd with 962ac59075b964b07152. This password is 123. After changing it, please promptly log in to the website backend to change the password.

2. Download /include/dedesql.class.php and /include/dedesqli.class.php

Find the following code:

    if(isset($GLOBALS['arrs1']))

    {

    $v1 = $v2 = '';

    for($i=0;isset($arrs1[$i]);$i++)

    {

    $v1 .= chr($arrs1[$i]);

    }

    for($i=0;isset($arrs2[$i]);$i++)

    {

    $v2 .= chr($arrs2[$i]);

    }

    $GLOBALS[$v1] .= $v2;

    }

    Change to:

    $GLOBALS['arrs1']=array();//fixedbyknownsec.com 2013.06.07

    if(isset($GLOBALS['arrs1']))

    {

    $v1 = $v2 = '';

    for($i=0;isset($arrs1[$i]);$i++)

    {

    $v1 .= chr($arrs1[$i]);

    }

    for($i=0;isset($arrs2[$i]);$i++)

    {

    $v2 .= chr($arrs2[$i]);

    }

    $GLOBALS[$v1] .= $v2;

 }

Some versions of dedesqli.class.php do not contain this code. Please make a backup before modifying, and then re-upload. The source of this temporary patching method for this vulnerability is: http://www.cctime.com/html/2013-6-8/2013681021556610.htm Our company has only tested that this method is effective for patching the account vulnerability. We have not tested whether it affects other functions of the system. If there is any impact, please restore and test. dedecms has a very large number of vulnerabilities and they are very serious. Please pay attention to upgrading and updating patches in a timely manner.