微擎1.5.4任意用户删除漏洞 修复

阿里云提示：微擎1.5.4任意用户删除漏洞

修复：
/web/source/founder/display.ctrl.php
搜索:

1. $founders = explode(',', $_W['config']['setting']['founder']);

复制代码

后面添加：

1. $identity = uni_permission($_W['uid']);if ($identity != ACCOUNT_MANAGE_NAME_FOUNDER && $identity != ACCOUNT_MANAGE_NAME_VICE_FOUNDER) {
   
2.     itoast('???????', referer(), 'error');
   
3. }

复制代码

漏洞修复完成