翻页 夜间
首页 > 疯狂的麦克斯 > 少年派的奇幻漂流

侍战队真剑者

Taiwan island’s DPP rattled as Malaysian PM reaffirms Taiwan is part of China_我的网站

梅花三弄

一 |     

     一键部署OpenClaw        

ThinkPHP是国内站长的老朋友,也是老漏洞的重灾区。

二 |     

Screenshot from the video of Al Jazeera's interview with Malaysian Prime Minister Anwar Ibrahim
    Screenshot from the video of Al Jazeera's interview with Malaysian Prime Minister Anwar Ibrahim
After Malaysian Prime Minister Anwar Ibrahim recently reaffirmed Taiwan is part of China during an interview, the Taiwan island's Democratic Progressive Party (DPP) was clearly rattled.
Experts said this only underscores the one-China principle has long been an established international consensus, and that the more the "pro-independence" DPP peddles narratives of "international support for Taiwan" and stirs up trouble, the more developments will emerge that run counter to its "Taiwan independence" agenda. 
In a statement issued on Tuesday, Taiwan's regional external affairs department called Anwar's recent remarks on Taiwan "false," claiming that Answer openly seeks to justify the mainland's use of force to unify Taiwan. 
In a video interview with Al Jazeera, released on August 16, Malaysian Prime Minister Anwar Ibrahim said, "I see Taiwan as part of China, period. You may disagree with there are some excesses. Yes, express your view, but it must be in the context. It is one China. It is accepted by all."
In response to the question on that "China has said that if peaceful reunification doesn't work, they reserve the right to use force. If it comes to that, would you condemn them?" Anwar responded by drawing an analogy with Malaysia. He said that if any part of Malaysia sought to break away, it would be his responsibility to preserve the country's territorial integrity.
When the host asked, "So, you would use force?" Anwar answered, "Yes," adding that otherwise the country would risk becoming fragmented.
Anwar's remarks, including those on China's use of all means to resolve the Taiwan question, highlight the firm international consensus on the one-China principle and reaffirm the basic principles enshrined in the UN Charter and international law, Zheng Jian, a professor at the Graduate Institute for Taiwan Studies at Xiamen University, told the Global Times on Wednesday.
Zheng noted that the Taiwan question is China's internal affair. A sovereign state has the right to safeguard its territorial integrity. Condoning separatist acts in Taiwan region would also set a problematic precedent for other countries dealing with their own separatist issues.
In a statement on Tuesday, the Taiwan regional authorities claimed that Anwar's support for the Chinese mainland could negatively affect the confidence of Taiwan businesses investing in Malaysia.
The Taiwan regional authorities' "threat" of possible economic and trade losses for Malaysia carries limited weight and amounts largely to bluffing. Zheng noted that Taiwan island does not control any critical lifelines of Malaysia's economy, while Malaysia has alternative channels and partners. Such threats therefore amount to little more than verbal posturing.
The Taiwan regional authorities' fierce but useless overreaction stems from the heavy reliance of "Taiwan independence" forces on external support. Once international statements contradicting their narrative gain traction within Taiwan, their domestic propaganda - such as claims of "widespread international support" for Taiwan - risks unraveling, prompting their sharp backlash.
Also, aside from the Malaysian prime minister's recent remarks, the joint exercises recently held by China and Indonesia have also dealt a blow to the DPP authorities. As key countries along the "first island chain", their moves have opened a rift in the denial-and-deterrence defense system built by the US, Japan and Taiwan island, delivering a major strategic blow to "Taiwan independence" forces, said Zheng.
"The more the DPP provokes and hypes up issues, the more international developments unfavorable to 'Taiwan independence' will emerge. If the DPP continues down the doomed and erroneous path of 'independence,' there will be more occasions in the future when it finds itself rattled," Zheng said.

三 | 5.x早期版本暴露过多次高危问题,比如远程代码执行、控制器任意调用。最坑的是很多站上线后没再更新过框架,漏洞一直躺在那儿。    

     自查第一步是确认版本。ThinkPHP 5.0.x/5.1.x低于特定小版本就要升级。先把composer.lock或者框架目录里的base.php版本号翻出来,再对照官方安全公告。    # 快速查看当前ThinkPHP版本    grep -r "VERSION" vendor/topthink/framework/src/think/App.php         # 或者看composer.lock    grep -A1 '"name": "topthink/framework"' composer.lock    

自查第二步是限制后台入口。把admin、manage这些路径用Nginx做IP白名单或者加HTTP基本认证,别让搜索引擎随便扫到。同时关闭debug模式,runtime目录禁止执行脚本。    # Nginx中禁止访问敏感路径    location ~* ^/(application|extend|runtime|thinkphp|vendor)/ {        deny all;    }         # 禁止执行上传目录里的PHP    location ~* ^/upload/.*\.(php|php5|phtml)$ {        deny all;    }    

最后一条容易被忽略:不要用默认的应用名和入口。很多扫描器直接请求/index.php/admin/login或者/index.php?s=/admin,你把后台入口改名,就能挡住一大半批量攻击。

四 |     数据来源:ThinkPHP官方安全公告及topthink/framework GitHub仓库版本更新记录

        
    

申请创业报道,分享创业好点子。点击此处,共同探讨创业新机遇!。

Current article:http://vr3.zongchaeiwengshuabaisisuofu.sbs/kk2/q7ltc.html

Published on:13:35:08