timthumb漏洞导致的Silence Is Golden Hack

demo站之前出的问题我实在是不服气, 今天跑上来检查了, 得出结论九成是timthumb漏洞导致的. Timthumb漏洞已经出来许多年了, 老版本的Timthumb由于白名单域名过滤机制的不完善, 给了hackers绕过验证的机会, 所以被黑风险很大. 国外论坛上也有对这个老问题的讨论, Are you using an outdated version for timthumb? So many wordpress sites are getting hacked cause of that. If I wa[.....] More?