当前位置:网站首页>Zhimeng dedecms security setup Guide
Zhimeng dedecms security setup Guide
2022-04-23 16:46:00 【Flower less venerable】
Many friends who installed dream weaving , I'm worried about the safety of Zhimeng , Often encounter hanging horses , Being linked to the dark chain and other things , Dream weaving cat has also encountered , Search through Baidu , Summed up some ways to improve the safety of weaving dream , The following settings can significantly improve the security of weaving dream .
It is recommended to install Zhimeng safety assistant
One 、 The basic chapter (60 branch )
Just complete the setting of the basic chapter , So congratulations , Your dream weaving safety has passed , contrary , If you don't follow the basics , So your website is in jeopardy .
1 Delete unnecessary directories
After the installation of weaving dream , Need to delete now install Catalog , If you don't need to use members 、 project (99% No user can use ), You can delete member、special Catalog .
2 Delete unnecessary files
plus It is suggested to keep only the following documents :ad_js.php,count.php,list.php,search.php,view.php, The rest are deleted .
plus The file functions in the folder are shown in the following table , If not used, you can delete .
file name |
The document states |
Suggest |
guestbook Folder |
Message board |
Delete |
img Folder |
picture |
Delete |
task Folder |
Planning tasks |
Delete |
ad_js.php |
Call advertisement , If your advertisement is not through the background “ Advertising management ” Set up , You can delete the file |
Retain |
advancedsearch.php、heightsearch.php |
Advanced search , It's usually only used for search.php |
Delete |
arcmulti.php |
Asynchronously calls the specified tag list , In less than , Delete it |
Delete |
bookfeedback.php、bookfeedback_js.php |
Book reviews and review call files , There is an injection vulnerability , unsafe |
Delete |
car.php、posttocar.php、carbuyaction.php |
The shopping cart |
Delete |
comments_frame.php |
Call comment , Security breach ( Now generally use third-party comments , No longer use the comments brought by Zhimeng ) |
Delete |
count.php |
Count the number of articles read |
Retain |
digg_ajax.php、digg_frame.php |
The top step function of the article |
Delete |
disdls.php、download.php |
Download statistics 、 Download function |
Delete |
diy.php |
Custom forms |
Retain |
erraddsave.php |
Correction of the article |
Delete |
feedback.php、feedback_ajax.php、feedback_js.php |
Comment related functions |
Delete |
flink.php、flink_add.php |
link 、 Add links ( It is suggested to delete , Otherwise, it is easy to expose the template path ) |
Delete |
freelist.php |
Free list |
Delete |
guestbook.php |
Leaving a message. |
Delete |
list.php |
Dynamically browse the column page |
Retain |
mytag_js.php |
Custom tag js Call mode ( If you don't use the custom macro tag in the background , Please delete ) |
Delete |
qrcode.php |
Generate qr code |
Delete |
recommend.php |
Information recommendation |
Delete |
rss.php |
RSS List of pp. |
Delete |
search.php |
Search for |
Retain |
showphoto.php |
Show big picture ( The atlas model will use ) |
Delete |
stow.php |
Collect articles |
Delete |
view.php |
Browse articles dynamically |
Retain |
vote.php |
vote |
Delete |
3 Modify the default background folder name
The default background is through the domain name /dede visit , Please change it to another name , The harder it is to guess, the better , You can use English + In the form of numbers . The modification method is to rename directly dede Just the name of the folder .
4 Create a new administrator account in the background , Delete default admin user
4.1 Create a new administrator account
Click System -> System user management -> Add Administrator , Fill in the login account, password and other information , User group selection ‘ Super administrator ’
4.2 Delete default admin user
Click System ->SQL Command line tools , function SQL command :delete from dede_admin where id = 1;
5 transfer data Directory to web Out of catalog
data There are serious security risks in the directory , It is necessary to data Move the directory outside the site directory . See this article for specific migration methods : domain name .com/study/78.html
There is really no condition to migrate to students outside the station , Please also be sure to data Change the name of the directory .
版权声明
本文为[Flower less venerable]所创,转载请带上原文链接,感谢
https://yzsam.com/2022/04/202204231640530441.html
边栏推荐
- 蓝桥杯省一之路06——第十二届省赛真题第二场
- NVIDIA显卡驱动报错
- 欣旺达:HEV和BEV超快充拳头产品大规模出货
- LVM与磁盘配额
- Dlib of face recognition framework
- [pyGame games] how did angry birds, a mobile game that became popular all over the world 10 years ago, dominate the list? Classic return
- 七朋元视界可信元宇宙社交体系满足多元化的消费以及社交需求
- STM32__03—初识定时器
- Use itextpdf to intercept the page to page of PDF document and divide it into pieces
- 阿里研发三面,面试官一套组合拳让我当场懵逼
猜你喜欢

众昂矿业:萤石浮选工艺

LVM and disk quota

MySql主从复制
JIRA screenshot

MySQL master-slave replication

Detailed explanation of file operation (2)

Construction of promtail + Loki + grafana log monitoring system

LVM与磁盘配额

Easyexcel reads the geographical location data in the excel table and sorts them according to Chinese pinyin

Bytevcharts visual chart library, I have everything you want
随机推荐
面试百分百问到的进程,你究竟了解多少
深度学习100例 | 第41天-卷积神经网络(CNN):UrbanSound8K音频分类(语音识别)
JMeter installation tutorial and solutions to the problems I encountered
Gartner 发布新兴技术研究:深入洞悉元宇宙
About JMeter startup flash back
Solution of garbled code on idea console
RAID磁盘阵列与RAID5的创建
Installation and management procedures
logback的配置文件加载顺序
欣旺达:HEV和BEV超快充拳头产品大规模出货
聊一聊浏览器缓存控制
计组 | 【七 输入/输出系统】知识点与例题
org. apache. parquet. schema. InvalidSchemaException: A group type can not be empty. Parquet does not su
深入了解3D模型相关知识(建模、材质贴图、UV、法线),置换贴图、凹凸贴图与法线贴图的区别
计算饼状图百分比
Query the data from 2013 to 2021, and only query the data from 2020. The solution to this problem is carried out
Xinwangda: HEV and Bev super fast charging fist products are shipped on a large scale
Gartner announces emerging technology research: insight into the meta universe
文件系统读写性能测试实战
如何用Redis实现分布式锁?