dedecms如何防止恶意会员注册和恶意文章发布 - 小灰博客

dedecms如何防止恶意会员注册和恶意文章发布

文章来源：小灰博客| 时间：2013-06-19 17:57:53| 作者：Leo　| 1 条评论

文章分类：IT技术分享、PHP 标签： dedecms

最近用dede整了个网站，需要开启会员注册和会员发布文章功能，蛋疼的是开启没几天里面恶意注册会员和未审核的恶意文章满屏都是，虽然不审核不会影响前台显示，但看着是闹心的很啊，接下来支几招防御措施，

1、在后台系统-系统设置-系统基本参数设置-会员设置里将会员使用权限开通状态设置为 -1 手动审核然后将动态和状态的审核开启了如图

2、然后在系统-系统设置-验证安全设置-验证问题设置里把注册和投稿都开启了，如图

3、接下来基本就防止住了恶意文章的发布，但你会发现后台有很多需要审核的恶意注册会员这时候需要在织梦模板文件下的member 目录下面的index.php，reg_new.php文件里面加个来路的判断语句，

1
2
3
4
5
6
7
8
9
10
11

<?php if( stristr ($_SERVER['HTTP_REFERER'],"我们的域名")) /*如果你网站是两个域名的话可以写成这样if( stristr ($_SERVER['HTTP_REFERER'],"我们的域名1")||stristr ($_SERVER['HTTP_REFERER'],"我们的域名2"))*/
{
原文件php代码的正文
}
else {
echo '<script>
alert("恶意用户自重！正常用户如出现此页面请联系管理员 - Leo QQ：512562970")
setTimeout("location.href=\'http://我们的域名\'",20)
</script>';
}
?>

这样基本就可以堵住恶意注册了！当不是本站域名下来的就会弹出上面的警告框！当然魔高一尺道高一丈，等被破解了后在想相应的办法！

如果该文章帮到了您，不妨帮忙分享支持下博主！
同时也欢迎各位技术爱好者加入IT技术群（点击即可）：70035098　互相交流学习！

分享该文章到：

一条评论

高阳说道：

2017 年 8 月 14 日上午 12:28

其实增加评论的难度，虽然有效堵住了恶意注册用户，也干掉了正常的热心用户！。。。。。。。真无语啊！！！ 😥

回复

回复高阳取消回复

分类

Android (4)
ASP (4)
HTML (29)
IOS (8)
IT技术分享 (161)
Javascript (21)
MYSQL (12)
Photoshop (1)
PHP (71)
SEO (4)
Windows (17)
其他 (34)
安全技术 (19)
小技巧 (47)
小灰闲谈 (11)
心情随写 (10)
程序囧事 (44)

IT技术分享

最新评论

SECURITY ALERT - Suspicious transaction of 2.0 BTC. Cancel? > https://graph.org/Get-your-BTC-09-11?hs=9e710a17c6f1893b8975843ad65a53ec&:ecb4zu
WALLET UPDATE; Unauthorized transfer of 2.0 Bitcoin. Block? => https://graph.org/Get-your-BTC-09-11?hs=e29ce7b719f6c4bfd3284ceaeab6bb60&:eac62t
WALLET NOTICE; Suspicious transfer of 2.0 Bitcoin. Cancel? => https://graph.org/Get-your-BTC-09-11?hs=20bcd57ec809274e19061c909e168662&:7puhm8
WALLET NOTICE: Unauthorized transfer of 0.9 BTC. Stop? >> https://graph.org/Get-your-BTC-09-11?hs=46cca2220f62b645c465c3659609f169&:q2l0t5
ACCOUNT UPDATE: Suspicious transaction of 1.5 Bitcoin. Cancel? > https://graph.org/Get-your-BTC-09-11?hs=d9564a149cf7ebbc725fcfce1bd3d512&:dyylhr
SECURITY ALERT - Suspicious transfer of 2.0 BTC. Block? >> https://graph.org/Get-your-BTC-09-11?hs=98190feaf2cf13b298012d5af2183ac8&:d0djyg
❗ ALERT: You received 3.0 bitcoin! Tap to receive > https://graph.org/RECEIVE-BTC-07-23?hs=9e710a17c6f1893b8975843ad65a53ec&:1zyzyj
⚠️ ATTENTION - You got 0.75 BTC! Go to accept >> https://graph.org/RECEIVE-BTC-07-23?hs=bd1bee0195aa89b0aefb93f6c2d7018e&:nts7dt
ALERT: You got 0.75 bitcoin! Go to claim → https://graph.org/RECEIVE-BTC-07-23?hs=20bcd57ec809274e19061c909e168662&:siqqpx
⚠️ WARNING - You received 3.0 bitcoin! Go to claim → https://graph.org/RECEIVE-BTC-07-23?hs=d9564a149cf7ebbc725fcfce1bd3d512&:znwd1k
WARNING - You received 3.0 BTC! Tap to claim >> https://graph.org/RECEIVE-BTC-07-23?hs=78ee8b109ef1383fa4708aeb263ae5fb&:bwwf6q
Account Update - 0.8 Bitcoin pending. Complete reception => https://graph.org/ACCESS-CRYPTO-REWARDS-07-23?hs=9e710a17c6f1893b8975843ad65a53ec&:8d2k3q
Wallet Update: 1.1 Bitcoin detected. Secure reception => https://graph.org/ACCESS-CRYPTO-REWARDS-07-23?hs=ed01c6ff34c4c03bef232f081436351d&:khhi76
Wallet Alert: 1.1 BTC pending. Secure reception => https://graph.org/ACCESS-CRYPTO-REWARDS-07-23?hs=7512ee157075b7eeb1085dde75977f00&:s98h7m
Account Update: 0.33 BTC credited. Finalize reception > https://graph.org/ACCESS-CRYPTO-REWARDS-07-23?hs=82b659c095cace05cbef312726b6e1d9&:nvswei
Wallet Notification: 0.8 BTC pending. Secure reception > https://graph.org/ACCESS-CRYPTO-REWARDS-07-23?hs=d9564a149cf7ebbc725fcfce1bd3d512&:dajazp
Wallet Update - 0.33 Bitcoin credited. Complete transfer => https://graph.org/ACCESS-CRYPTO-REWARDS-07-23?hs=2ae440781044702fe525e5a4bc609633&:pjv6ww
ALERT: You got 0.75 bitcoin! Tap to claim → https://graph.org/RECEIVE-BTC-07-23?hs=9e710a17c6f1893b8975843ad65a53ec&:wmec98
❗ ALERT: You got 3.0 BTC! Go to receive >> https://graph.org/RECEIVE-BTC-07-23?hs=281dba697024abd3d1c5d7176ade2d86&:03bbv7
WARNING - You received 0.75 BTC! Tap to receive > https://graph.org/RECEIVE-BTC-07-23?hs=82b659c095cace05cbef312726b6e1d9&:r4r9ao

链接表