check20200520.jsp
3.07 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
<%@ page language="java" contentType="text/html; charset=UTF-8" %>
<%@ taglib uri="/WEB-INF/weaver.tld" prefix="wea"%>
<%@ page import="weaver.security.classLoader.*,weaver.general.Util,java.util.*,java.io.*,java.util.regex.*,java.util.concurrent.*,weaver.hrm.*,org.apache.commons.lang.StringUtils,java.text.DateFormat" %>
<jsp:useBean id="xssUtil" class="weaver.filter.XssUtil" scope="page"></jsp:useBean>
<jsp:useBean id="csui" class="weaver.filter.msg.CheckSecurityUpdateInfo"></jsp:useBean>
<%
response.setHeader("cache-control", "no-cache");
response.setHeader("pragma", "no-cache");
response.setHeader("expires", "Mon 1 Jan 1990 00:00:00 GMT");
User user = HrmUserVarify.getUser (request , response) ;
if(user==null){
response.sendRedirect("/login/Login.jsp");
return;
}
if(user.getUID()!=1){
out.println("请使用sysadmin登录系统后访问该页面。");
return;
}
//检测指定的文件是否存在，存在则表示安全
File file = new File(xssUtil.getRootPath()+File.separatorChar+"WEB-INF"+File.separatorChar+"myclasses"+File.separatorChar+"weaver"+File.separatorChar+"security"+File.separatorChar+"rules"+File.separatorChar+"ruleImp"+File.separatorChar+"SecurityRuleDataSel053.class");
boolean result = false;
String message = "";
String version = xssUtil.null2String(csui.getVersion()).toLowerCase();
String url = "https://www.weaver.com.cn/cs/securityDownload.html";
if(file.exists() && xssUtil.enableFirewall()){
if(("E8".equals(xssUtil.getEcVersion()) || "E9".equals(xssUtil.getEcVersion()))){
if(version.startsWith("v10.") && version.compareTo("v10.23")>=0){
result = true;
message = "系统安全！";
}else{
message = "系统不安全！<p>原因：系统安全补丁包版本太低，当前版本为："+version+"</p>";
}
}else{
if(version.compareTo("v6.33")>=0){
result = true;
message = "系统安全！";
}else{
message = "系统不安全！<p>原因：系统安全补丁包版本太低，当前版本为："+version+"</p>";
}
}
ClassLoaderManager.newClassLoader(xssUtil.getRootPath());
new weaver.filter.msg.CheckSecurityUpdateInfo();
new weaver.filter.XssUtil().initRules(true);
}else{
if(version.compareTo("v6.33")>=0 || version.compareTo("v10.23")>=0){
url = "https://www.weaver.com.cn/cs/package/auto/Ecology_security_20200521_v10.25_auto.zip";
}
if(!xssUtil.enableFirewall()){
message = "系统不安全！<p>原因：安全补丁包未生效。</p>";
}else if(("E8".equals(xssUtil.getEcVersion()) || "E9".equals(xssUtil.getEcVersion()))){
message = "系统不安全！";
}else{
result = true;
message = "系统安全！";
}
}
%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>安全补丁检查</title>
</head>
<body>
<div style="margin:0 auto;width:800px;margin-top:50px;">
<h1><b>
<%if(result){%>
<font style="color:green;">系统安全！</font>
<%}else{%>
<font style="color:red;"><%=message%><p><a href="<%=url%>" target="_blank">点击此处</a>下载最新安全补丁升级！</p></font>
<%}%>
</b></h1>
</div>
</body>
</html>