想了解dedecms v5.1 WriteBookText() code injection vul注入漏洞的相关内容吗，在本文为您仔细讲解dedecms v5.1注入的相关知识和一些Code实例，欢迎阅读和指正，我们先划重点：dedecms,,WriteBookText(),code,injection,vul,注入漏洞，下面大家一起来学习吧。
function WriteBookText($cid,$body)
{<span id="more-1944"></span>
global $cfg_cmspath,$cfg_basedir;
$ipath = $cfg_cmspath."/data/textdata";
$tpath = ceil($cid/5000);
if(!is_dir($cfg_basedir.$ipath)) MkdirAll($cfg_basedir.$ipath,$GLOBALS['cfg_dir_purview']);
if(!is_dir($cfg_basedir.$ipath.'/'.$tpath)) MkdirAll($cfg_basedir.$ipath.'/'.$tpath,$GLOBALS['cfg_dir_purview']);
$bookfile = $cfg_basedir.$ipath."/{$tpath}/bk{$cid}.php";
$body = "<"."?php\r\n".$body."\r\n?".">";
@$fp = fopen($bookfile,'w');
@flock($fp);
@fwrite($fp,$body);
@fclose($fp);
<div id="qhide_185676" class="qt" style="display: block;">}
</div>
