鸿门宴

Pak to demarche US envoy over Biden's statement on nukes: FM_我的网站

healer

A |

　一键部署OpenClaw

ThinkPHP是国内站长的老朋友，也是老漏洞的重灾区。

B | Karachi, Oct 15 (UNI) Foreign Minister Bilawal Bhutto-Zardari on Saturday said Pakistan has decided to summon the US ambassador to the Foreign Office to give him a demarche over President Joe Biden’s statement regarding the country’s nuclear capability.

“We know how to safeguard our nuclear arsenal and they meet each and every international standard in accordance with the IAEA (International Atomic Energy Agency) as far as security and safety is concerned,” Bilawal said.

“Pakistan is adamant about ensuring its integrity and safety. Security questions, if any, should be raised on the nuclear weapons of India that recently fired a missile into Pakistani territory by accident.", according to media reports.

Bilawal said he had discussed President Biden's statement with the Prime Minister in detail and hoped this incident would not affect the Pakistan-US relations negatively, Geo news reports.

“This is not only irresponsible and unsafe but raises genuine and serious concerns about the safety of nuclear-capable countries. I am surprised by the remarks of President Biden. I believe this is exactly the sort of misunderstanding that is created when there is a lack of engagement,” the foreign minister said.

"We will make sure our engagements with the US continue in the right direction," Bilawal said.

Bilawal, however, added that he did not think it was an official function and it wasn’t an address to the parliament or an interview.

However, he warned that at the same time the nation should avoid churning out conspiracy theories.

United States President Joe Biden on Saturday said Pakistan may be “one of the most dangerous nations in the world” as the country has “nuclear weapons without any cohesion”.

The US president made the comments while addressing a Democratic congressional campaign committee reception on Thursday.

Biden’s remarks were made with regard to the changing geopolitical situation globally, as he highlighted that the world was changing rapidly, and countries were rethinking their alliances.

“And the truth of the matter is — I genuinely believe this — that the world is looking to us. Not a joke.

"Even our enemies are looking at us to figure out how we figure this out, what we do,” he added.

UNI GNK SY SHK1757。5.x早期版本暴露过多次高危问题，比如远程代码执行、控制器任意调用。最坑的是很多站上线后没再更新过框架，漏洞一直躺在那儿。

自查第一步是确认版本。ThinkPHP 5.0.x/5.1.x低于特定小版本就要升级。先把composer.lock或者框架目录里的base.php版本号翻出来，再对照官方安全公告。

C | # 快速查看当前ThinkPHP版本 grep -r "VERSION" vendor/topthink/framework/src/think/App.php # 或者看composer.lock grep -A1 '"name": "topthink/framework"' composer.lock

自查第二步是限制后台入口。把admin、manage这些路径用Nginx做IP白名单或者加HTTP基本认证，别让搜索引擎随便扫到。同时关闭debug模式，runtime目录禁止执行脚本。 # Nginx中禁止访问敏感路径 location ~* ^/(application|extend|runtime|thinkphp|vendor)/ { deny all; } # 禁止执行上传目录里的PHP location ~* ^/upload/.*\.(php|php5|phtml)$ { deny all; }

最后一条容易被忽略：不要用默认的应用名和入口。