阿里云微擎1.5.4任意用户删除漏洞

阿里云提示微擎1.5.4任意文件删除漏洞解决办法

找到文件：/web/source/founder/display.ctrl.php大约14行代码

$founders = explode(',', $_W['config']['setting']['founder']);

在后面添加一下代码

$identity = uni_permission($_W['uid']);if ($identity != ACCOUNT_MANAGE_NAME_FOUNDER && $identity != ACCOUNT_MANAGE_NAME_VICE_FOUNDER) {
    itoast('???????', referer(), 'error');
}

通过验证，修复完成！