百度翻译

11 high school students arrested over massive brawl in middle of school day_我的网站

小时代

一 |

　一键部署OpenClaw

ThinkPHP是国内站长的老朋友，也是老漏洞的重灾区。

二 | 5.x早期版本暴露过多次高危问题，比如远程代码执行、控制器任意调用。 Eleven students have been arrested following a massive high school brawl that took place in the middle of the school day.The incident occurred at Matanzas High School in Palm Coast, Florida – some 90 miles north of Orlando – when two school resource officers responded to a disturbance in a hallway of the high school at approximately 1 p.m. on Monday afternoon, according to a statement released from Flagler County Sheriff’s Office.All of the schools in Flagler County have at least two school resource deputies assigned to each campus and the two officers “immediately assisted teachers and administrators in attempting to break up the fight and disperse the crowd of on-lookers,” police said.“During the fight, a female student pushed (a deputy) so they could attack another student,” authorities said in their statement describing the chaotic situation. “At the same time, (another deputy) was working to control the situation and observed a male student run into the altercation. Deputy Landi then observed the student charging at a school staff member while swinging his arms, ultimately punching the staff member in the shoulder … At the same time, another school administrator was attempting to escort a student away from the fight, when another male student ran up to the administrator and grabbed them. The student then battered the administrator before being taken to the Dean’s Office.”In total, 11 students were arrested, three of which with felony charges of Resisting a Law Enforcement Officer with Violence and Battery on a School Official. The other eight students had affidavits filed with the State Attorney’s Office recommending charges to be filed against them for misdemeanor offenses, police said.“The lack of respect demonstrated by these students is simply shameful,” said Flagler County Sheriff Rick Staly. “But actions have consequences. Parents, be the Sheriff in your home and teach your kids the importance of respecting teachers, staff, and deputies. Teach them how to handle disagreements and that fighting only leads to more violence. We have a zero-tolerance policy for violence at schools, and you will be arrested. I also commend our School Resource Deputies and the Matanzas High School staff for quickly getting a very volatile situation under control before anyone was seriously hurt.”Flagler Schools Superintendent LaShakia Moore added, “I agree with what our Sheriff has said in the past; this type of behavior is not to be tolerated by anyone. That said, these actions are not indicative of the thousands of students who come to our campuses each and every day to learn. There are so many students, teachers, administrators, and staff who work every day to promote and celebrate a positive school culture at their schools. This is an opportunity for our parents and guardians to reinforce the good choices their children decide to make and remind them why it is important to be successful in life.”Parents have since been notified of the incident by Matanzas High School staff and an investigation into the cause of the altercation is underway.。最坑的是很多站上线后没再更新过框架，漏洞一直躺在那儿。

三 |

自查第一步是确认版本。ThinkPHP 5.0.x/5.1.x低于特定小版本就要升级。先把composer.lock或者框架目录里的base.php版本号翻出来，再对照官方安全公告。 # 快速查看当前ThinkPHP版本 grep -r "VERSION" vendor/topthink/framework/src/think/App.php # 或者看composer.lock grep -A1 '"name": "topthink/framework"' composer.lock

自查第二步是限制后台入口。

四 | 把admin、manage这些路径用Nginx做IP白名单或者加HTTP基本认证，别让搜索引擎随便扫到。同时关闭debug模式，runtime目录禁止执行脚本。 # Nginx中禁止访问敏感路径 location ~* ^/(application|extend|runtime|thinkphp|vendor)/ { deny all; } # 禁止执行上传目录里的PHP location ~* ^/upload/.*\.(php|php5|phtml)$ { deny all; }

最后一条容易被忽略：不要用默认的应用名和入口。很多扫描器直接请求/index.php/admin/login或者/index.php?s=/admin，你把后台入口改名，就能挡住一大半批量攻击。