防范技巧:如何防范你的个人网站被黑

SQL注入攻击的防范

 

引:许多站长都有过这样的经历：网站遭到黑客入侵、网页被改得面目全非，为了帮助大家防范黑客入侵，笔者把自己在实践中总结的防范措施写了出来，只要你如法炮制，一定能保证网站的安全、从此也不会被黑了！

一、SQL注入攻击的防范

目前黑客攻入网站最常用的伎俩是SQL注入攻击，由于SQL注入是从正常的WWW端口访问，跟一般的Web页面访问没什么区别，所以目前市面的防火墙都不会对SQL注入发出警报。现在很多网站程序，由于未对用户输入数据的合法性进行判断，因此当你在IE地址栏中提交数据库查询代码时，例如输入www.labxw.com/displist.asp?id=xx">HTTP://www.labxw.com/displist.asp?id=xx and 1=1时返回正常，但是输入www.labxw.com/displist.asp?id=xx">HTTP://www.labxw.com/displist.asp?id=xx and 1=2时却返回出错信息，这就说明displist.asp文件存在着SQL注入漏洞。

如果你的网站有这样的注入漏洞，黑客使用瑞士军刀、明小子旁注等软件，通过displist.asp注入点即可攻进你的网站，然后他上传ASP木马，在IE地址栏中运行该ASP木马，即可随意上传下载网站上的文件、篡改网页，由于在服务器端不能禁止asp的运行，因此你还无法禁止asp木马的运行。

为了防范黑客通过SQL注入攻进网站，你可以使用枫叶防注3.5版，按照以下的步骤操作：

1、上传枫叶防注3.5版

首先载枫叶防注3.5版，然后把压缩包解压到一个目录中；再将该目录(包括里面所有文件)上传到服务器。

2、修改网站程序中的CONN.asp文件

在网站程序中找到CONN.asp文件(即数据库连接文件)；然后在枫叶防注3.5版中，找到并打开sqlin.asp文件，把sqlin.asp中代码全部复制到CONN.asp文件的尾部(下图1)，这样网站中所有调用CONN的文件，都能防范注入攻击了！

 

 

对网站中所有的CONN.asp文件都应该如此修改，最后把修改后的CONN.asp上传服务器。

3、修改需要防注的页面

检查网站程序，打开那些需要防注的页面(即含有数据库操作的ASP文件)，然后在其头部加上 这一句，于是这些页面就能防注了，最后把它们都上传到服务器。

【提示】：你的网站经过以上处理后，黑客就不能通过SQL注入攻进网站了！上面的方法非常有效，笔者的小站以前每天都被黑客攻破，自从如此处理之后，再也没有黑客攻入了。

二、网站防黑其他技巧

除了上面介绍的主要防黑措施之外，你还应该采取以下措施：

1、堵住数据库下载漏洞

为数据库起个无规律、非常规的名字，比如c26sksfln.mdb，把它放在几层目录下(如./labxw/lagq/laxw/)。不要在程序中写出数据库名。例如在conn.asp中含有DBPath=Server.MapPath("cmddb.mdb")这一句就很危险，因为一旦别人拿到conn.asp，网站数据库的名字和位置就一览无余了。

2、没有上传和论坛程序

网站中最好没有任何上传程序和论坛程序。建议你采用FTP上传、维护网页，不要安装asp的上传程序；如果asp上传文件必须保留，也应该进行身份认证。如果论坛支持文件上传，你应该在程序中设好上传文件的格式，直接在程序中锁定，只有图象和压缩文件才能上传。

3、后台管理程序

不要在网页上显示后台管理程序的入口链接，以免黑客攻入网站后台管理程序。管理员的用户名和密码也不能过于简单，注意定期更换。建议平时删除后台管理程序，维护时再通过ftp上传，然后使用。

 

二、网站防黑其他技巧

除了上面介绍的主要防黑措施之外，你还应该采取以下措施：

1、堵住数据库下载漏洞

为数据库起个无规律、非常规的名字，比如c26sksfln.mdb，把它放在几层目录下(如./labxw/lagq/laxw/)。不要在程序中写出数据库名。例如在conn.asp中含有DBPath=Server.MapPath("cmddb.mdb")这一句就很危险，因为一旦别人拿到conn.asp，网站数据库的名字和位置就一览无余了。

2、没有上传和论坛程序

网站中最好没有任何上传程序和论坛程序。建议你采用FTP上传、维护网页，不要安装asp的上传程序；如果asp上传文件必须保留，也应该进行身份认证。如果论坛支持文件上传，你应该在程序中设好上传文件的格式，直接在程序中锁定，只有图象和压缩文件才能上传。

3、后台管理程序

不要在网页上显示后台管理程序的入口链接，以免黑客攻入网站后台管理程序。管理员的用户名和密码也不能过于简单，注意定期更换。建议平时删除后台管理程序，维护时再通过ftp上传，然后使用。

• 北京: 千橡集团暨校内网诚聘软件研发工程师
• JavaEye问答大赛开始了！ 从6月23日 至 7月6日，奖品丰厚 ！
• Oracle专区上线，有Oracle最新文章，重要下载及知识库等精彩内容，欢迎访问。
• 搜狐网站诚聘Java、PHP和C++工程师
• 快来参加7月17日在成都举行的SOA中国技术论坛

2007-3-15 22时59分48秒 CST   org.springframework.web.struts.ContextLoaderPlugIn   TRAS0014I: 下列异常已记录 org.springframework.beans.facto   
2007-3-15 22时59分48秒 CST   org.springframework.web.struts.ContextLoaderPlugIn   Context initialization failed   

常规属性 
消息 Context initialization failed  作为从服务器运行时接收的消息文本  
消息类型 错误  消息类型  
解释 No explanation found for ID=Context initialization failed  解释  
用户操作 No user action found for ID=Context initialization failed  建议  
消息创始者 org.springframework.web.struts.ContextLoaderPlugIn  事件的创始者  
源对象类型 RasLoggingService  源对象的类型  
时间戳记 2007-3-15 22时59分48秒 CST  实施事件的时间  
线程标识 4379df48  遇到事件的 Java 运行时线程标识  
节点名 test  实施事件的节点  
服务器名 server1  实施事件的服务器  

常规属性 
消息 TRAS0014I: 下列异常已记录 org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sessionFactory' defined in ServletContext resource [/WEB-INF/classes/applicationContext.xml]: Initialization of bean failed; nested exception is java.lang.NoClassDefFoundError: net/sf/cglib/core/ReflectUtils java.lang.NoClassDefFoundError: net/sf/cglib/core/ReflectUtils at net.sf.cglib.core.KeyFactory$Generator.generateClass(KeyFactory.java:167) at net.sf.cglib.core.DefaultGeneratorStrategy.generate(DefaultGeneratorStrategy.java:25) at net.sf.cglib.core.AbstractClassGenerator.create(AbstractClassGenerator.java:215) at net.sf.cglib.core.KeyFactory$Generator.create(KeyFactory.java:145) at net.sf.cglib.core.KeyFactory.create(KeyFactory.java:117) at net.sf.cglib.core.KeyFactory.create(KeyFactory.java:108) at net.sf.cglib.core.KeyFactory.create(KeyFactory.java:104) at at org.hibernate.impl.SessionFactoryImpl.<clinit>(SessionFactoryImpl.java:321).null(Unknown Source) at org.hibernate. -- <truncated> --。  作为从服务器运行时接收的消息文本  
消息类型 错误  消息类型  
解释 记录了异常消息。  解释  
用户操作 确定引起异常的原因，并采取相应操作。还记录了其它有关异常的消息。  建议  
消息创始者 org.springframework.web.struts.ContextLoaderPlugIn  事件的创始者  
源对象类型 RasLoggingService  源对象的类型  
时间戳记 2007-3-15 22时59分48秒 CST  实施事件的时间  
线程标识 4379df48  遇到事件的 Java 运行时线程标识  
节点名 test  实施事件的节点  
服务器名 server1  实施事件的服务器  

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">

   <web-app id="WebApp">
      <display-name>WebCustom</display-name>
      <context-param id="ContextParam_1173968551297">
         <param-name>contextConfigLocation</param-name>
         <param-value>classpath:applicationContext*.xml</param-value>
      </context-param>
      <filter id="Filter_1173968551297">
         <filter-name>SetCharacterEncoding</filter-name>
         <filter-class>com.test.commons.web.filter.SetCharacterEncodingFilter</filter-class>
         <init-param id="InitParam_1173968551453">
            <param-name>encoding</param-name>
            <param-value>GBK</param-value>
         </init-param>
      </filter>
      <filter id="Filter_1173968551453">
         <filter-name>OpenSessionInViewFilter</filter-name>
         <filter-class>org.springframework.orm.hibernate3.support.OpenSessionInViewFilter</filter-class>
      </filter>
      <filter-mapping id="FilterMapping_1173968551453">
         <filter-name>SetCharacterEncoding</filter-name>
         <url-pattern>*.shtml</url-pattern>
      </filter-mapping>
      <filter-mapping id="FilterMapping_1173968551454">
         <filter-name>OpenSessionInViewFilter</filter-name>
         <url-pattern>/*</url-pattern>
      </filter-mapping>
      <listener id="Listener_1173968551484">
         <listener-class>org.springframework.web.util.Log4jConfigListener</listener-class>
      </listener>
      <listener id="Listener_1173968551485">
         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
      </listener>
      <listener id="Listener_1173968551486">
         <listener-class>com.opensymphony.xwork.spring.SpringObjectFactoryListener</listener-class>
      </listener>
      <servlet id="Servlet_1173968542422">
         <servlet-name>FileManager</servlet-name>
         <servlet-class>com.test.filemanager.servlet.FileManagerServlet</servlet-class>
         <load-on-startup>5</load-on-startup>
      </servlet>
      <servlet id="Servlet_1173968542423">
         <servlet-name>WebSysLogger</servlet-name>
         <servlet-class>com.test.zycms.web.servlet.WebSysLoggerServlet</servlet-class>
         <load-on-startup>1</load-on-startup>
      </servlet>
      <servlet id="Servlet_1173968542424">
         <servlet-name>WebStat</servlet-name>
         <servlet-class>com.test.webstat.web.WebStatServlet</servlet-class>
         <load-on-startup>10</load-on-startup>
      </servlet>
      <servlet id="Servlet_1173968542425">
         <servlet-name>FCKConnector</servlet-name>
         <servlet-class>com.fredck.FCKeditor.connector.ConnectorServlet</servlet-class>
         <init-param id="InitParam_1173968551484">
            <param-name>debug</param-name>
            <param-value>false</param-value>
         </init-param>
         <load-on-startup>20</load-on-startup>
      </servlet>
      <servlet id="Servlet_1173968542426">
         <servlet-name>action</servlet-name>
         <servlet-class>com.test.cms.commons.web.CmsActionServlet</servlet-class>
         <init-param id="InitParam_1173968551485">
            <param-name>config</param-name>
            <param-value>/WEB-INF/struts-config.xml</param-value>
         </init-param>
         <init-param id="InitParam_1173968551486">
            <param-name>debug</param-name>
            <param-value>0</param-value>
         </init-param>
         <init-param id="InitParam_1173968551487">
            <param-name>detail</param-name>
            <param-value>1</param-value>
         </init-param>
         <load-on-startup>25</load-on-startup>
      </servlet>
      <servlet id="Servlet_1173968542427">
         <servlet-name>freemarker</servlet-name>
         <servlet-class>com.opensymphony.webwork.views.freemarker.FreemarkerServlet</servlet-class>
         <load-on-startup>40</load-on-startup>
      </servlet>
      <servlet id="Servlet_1173968542428">
         <servlet-name>webwork</servlet-name>
         <servlet-class>com.opensymphony.webwork.dispatcher.ServletDispatcher</servlet-class>
         <load-on-startup>30</load-on-startup>
      </servlet>
      <servlet-mapping id="ServletMapping_1173968551500">
         <servlet-name>WebSysLogger</servlet-name>
         <url-pattern>/websyslogger</url-pattern>
      </servlet-mapping>
      <servlet-mapping id="ServletMapping_1173968551501">
         <servlet-name>WebStat</servlet-name>
         <url-pattern>/webstat</url-pattern>
      </servlet-mapping>
      <servlet-mapping id="ServletMapping_1173968551502">
         <servlet-name>FileManager</servlet-name>
         <url-pattern>/filemanagerservlet</url-pattern>
      </servlet-mapping>
      <servlet-mapping id="ServletMapping_1173968551503">
         <servlet-name>FCKConnector</servlet-name>
         <url-pattern>/common/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector</url-pattern>
      </servlet-mapping>
      <servlet-mapping id="ServletMapping_1173968551504">
         <servlet-name>action</servlet-name>
         <url-pattern>*.do</url-pattern>
      </servlet-mapping>
      <servlet-mapping id="ServletMapping_1173968551505">
         <servlet-name>webwork</servlet-name>
         <url-pattern>*.shtml</url-pattern>
      </servlet-mapping>
      <servlet-mapping id="ServletMapping_1173968551506">
         <servlet-name>freemarker</servlet-name>
         <url-pattern>*.ftl</url-pattern>
      </servlet-mapping>
      <session-config id="SessionConfig_1173968551500">
         <session-timeout>30</session-timeout>
      </session-config>
      <welcome-file-list id="WelcomeFileList_1173968551500">
         <welcome-file>/index.jsp</welcome-file>
      </welcome-file-list>
      <taglib id="TagLibRef_1173968551500">
         <taglib-uri>/WEB-INF/struts-menu-el.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-menu-el.tld</taglib-location>
      </taglib>
      <taglib id="TagLibRef_1173968551501">
         <taglib-uri>/WEB-INF/struts-menu.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-menu.tld</taglib-location>
      </taglib>
      <taglib id="TagLibRef_1173968551502">
         <taglib-uri>/WEB-INF/struts-bean.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-bean.tld</taglib-location>
      </taglib>
      <taglib id="TagLibRef_1173968551503">
         <taglib-uri>/WEB-INF/struts-html.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-html.tld</taglib-location>
      </taglib>
      <taglib id="TagLibRef_1173968551504">
         <taglib-uri>/WEB-INF/struts-logic.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-logic.tld</taglib-location>
      </taglib>
      <taglib id="TagLibRef_1173968551505">
         <taglib-uri>/WEB-INF/struts-template.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-template.tld</taglib-location>
      </taglib>
      <taglib id="TagLibRef_1173968551506">
         <taglib-uri>/WEB-INF/struts-tiles.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-tiles.tld</taglib-location>
      </taglib>
      <taglib id="TagLibRef_1173968551507">
         <taglib-uri>/WEB-INF/struts-nested.tld</taglib-uri>
         <taglib-location>/WEB-INF/struts-nested.tld</taglib-location>
      </taglib>
      <resource-ref id="ResourceRef_1173968551500">
         <res-ref-name>jdbc/zycms</res-ref-name>
         <res-type>javax.sql.DataSource</res-type>
         <res-auth>Container</res-auth>
         <res-sharing-scope>Shareable</res-sharing-scope>
      </resource-ref>
   </web-app>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE struts-config PUBLIC "-//Apache Software Foundation//DTD Struts Configuration 1.1//EN" "http://jakarta.apache.org/struts/dtds/struts-config_1_1.dtd">
<struts-config>
	<form-beans>
........	</form-beans>
	<action-mappings>
.........	</action-mappings>
	
	<message-resources parameter="ApplicationResources_CN" />
	
	<!--   plug-in
		className="com.test.commons.sfw.web.plugin.InitHibernate" /-->
	<plug-in className="net.sf.navigator.menu.MenuPlugIn">
		<set-property property="menuConfig"
			value="/WEB-INF/menu-config.xml" />
	</plug-in>

	<!--  以下配置用于整合struts -->
	<plug-in       
		className="org.springframework.web.struts.ContextLoaderPlugIn">
		<set-property property="contextConfigLocation"
			value="/WEB-INF/classes/applicationContext.xml,/WEB-INF/classes/applicationContext_cms.xml,/WEB-INF/classes/applicationContext-sys.xml" />
	</plug-in>

</struts-config>

<?xml version="1.0" encoding="GBK"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">

<beans>

	<bean id="spring-object-factory"
		class="com.opensymphony.xwork.spring.SpringObjectFactory"
		init-method="initObjectFactory" />
	<bean id="propertyConfigurer"
		class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
		<property name="location">
			<value>classpath:zycms_config.properties</value>
		</property>
	</bean>
	<!-- DataSoure -->
	<bean id="dataSource"
	class="org.springframework.jndi.JndiObjectFactoryBean">
		<property name="jndiName"><value>jdbc/zycms</value></property>
		<property name="resourceRef"><value>true</value></property>
	</bean>


	<bean id="sessionFactory"
		class="org.springframework.orm.hibernate3.LocalSessionFactoryBean">
		<property name="dataSource">
			<ref local="dataSource" />
		</property>
		<property name="mappingDirectoryLocations">
			<list>
				<value>classpath:com/test/zycms/domain</value>
			</list>
		</property> 
		<!--  -->
		
		
		
		<property name="hibernateProperties">
			<props>
				<prop key="hibernate.dialect">
					${hibernate.dialect}
				</prop>
				<prop key="hibernate.jdbc.use_scrollable_resultset">
					true
				</prop>
				<prop key="hibernate.query.substitutions">1</prop>
				<prop key="hibernate.connection.provider_class">
					org.hibernate.connection.DatasourceConnectionProvider
				</prop>
				<prop key="hibernate.jdbc.fetch_size">50</prop>
				<prop key="hibernate.jdbc.batch_size">25</prop>
				<prop key="hibernate.jdbc.batch_versioned_data">
					true
				</prop>
				<prop key="hibernate.jdbc.use_streams_for_binary">
					true
				</prop>
				<prop key="hibernate.jdbc.use_get_generated_keys">
					true
				</prop>
				<prop key="hibernate.max_fetch_depth">1</prop>
				<prop key="hibernate.cache.region_prefix">
					hibernate.test
				</prop>
				<prop key="hibernate.cache.use_query_cache">true</prop>
				<prop key="hibernate.cache.provider_class">
					org.hibernate.cache.EhCacheProvider
				</prop>
				<prop key="hibernate.show_sql">false</prop>
			</props>
		</property>
	</bean>
	
	<!-- DAO object: Hibernate implementation -->
	<bean id="transactionManager"
		class="org.springframework.orm.hibernate3.HibernateTransactionManager">
		<property name="sessionFactory">
			<ref local="sessionFactory" />
		</property>
	</bean>
	<bean id="baseTxProxy" lazy-init="true"
		class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean"
		abstract="true">
		<property name="transactionManager">
			<ref bean="transactionManager" />
		</property>
		<property name="transactionAttributes">
			<props>
				<prop key="add*">PROPAGATION_REQUIRED</prop>
				<prop key="save*">PROPAGATION_REQUIRED</prop>
				<prop key="create*">PROPAGATION_REQUIRED</prop>
				<prop key="del*">PROPAGATION_REQUIRED</prop>
				<prop key="remove*">PROPAGATION_REQUIRED</prop>
				<prop key="update*">PROPAGATION_REQUIRED</prop>
				<prop key="build*">PROPAGATION_REQUIRED</prop>
				<prop key="*">PROPAGATION_REQUIRED,readOnly</prop>
				
			</props>
		</property>
	</bean>


	<bean id="sequenceDAO"
		class="com.test.framework.dao.hibernate.SequenceDAOImpl">
		<property name="sessionFactory">
			<ref local="sessionFactory" />
		</property>
	</bean>

	<bean id="baseDAO"
		class="com.test.framework.dao.hibernate.BaseDAOImpl">
		<property name="sessionFactory">
			<ref local="sessionFactory" />
		</property>
		<property name="sequenceDAO">
			<ref bean="sequenceDAO" />
		</property>
	</bean>
</beans>

[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R javax.servlet.UnavailableException
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at org.apache.struts.action.ActionServlet.initModulePlugIns(ActionServlet.java:1169)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at org.apache.struts.action.ActionServlet.init(ActionServlet.java:473)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.zytech.cms.commons.web.CmsActionServlet.init(CmsActionServlet.java:20)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at javax.servlet.GenericServlet.init(GenericServlet.java:258)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.StrictServletInstance.doInit(StrictServletInstance.java:82)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._init(StrictLifecycleServlet.java:147)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.PreInitializedServletState.init(StrictLifecycleServlet.java:270)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.init(StrictLifecycleServlet.java:113)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletInstance.init(ServletInstance.java:189)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at javax.servlet.GenericServlet.init(GenericServlet.java:258)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebAppServletManager.addServlet(WebAppServletManager.java:870)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebAppServletManager.loadServlet(WebAppServletManager.java:224)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebAppServletManager.loadAutoLoadServlets(WebAppServletManager.java:542)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebApp.loadServletManager(WebApp.java:1277)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebApp.init(WebApp.java:283)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.srt.WebGroup.loadWebApp(WebGroup.java:387)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.srt.WebGroup.init(WebGroup.java:209)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.WebContainer.addWebApplication(WebContainer.java:987)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.WebContainerImpl.install(WebContainerImpl.java:136)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.WebContainerImpl.start(WebContainerImpl.java:356)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.ApplicationMgrImpl.start(ApplicationMgrImpl.java:418)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.DeployedApplicationImpl.fireDeployedObjectStart(DeployedApplicationImpl.java:787)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.DeployedModuleImpl.start(DeployedModuleImpl.java:354)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.DeployedApplicationImpl.start(DeployedApplicationImpl.java:575)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplication(ApplicationMgrImpl.java:271)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplication(ApplicationMgrImpl.java:488)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at java.lang.reflect.Method.invoke(Method.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.tivoli.jmx.modelmbean.MMBInvoker.invoke(MMBInvoker.java:46)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.tivoli.jmx.modelmbean.MMBInvoker.invokeOperation(MMBInvoker.java:115)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.tivoli.jmx.modelmbean.DynamicModelMBeanSupport.invoke(DynamicModelMBeanSupport.java:409)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at javax.management.modelmbean.RequiredModelMBean.invoke(RequiredModelMBean.java:323)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.tivoli.jmx.GenericMBeanSupport.invoke(GenericMBeanSupport.java:178)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.tivoli.jmx.MBeanAccess.invoke(MBeanAccess.java:113)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.tivoli.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:290)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.management.AdminServiceImpl.invoke(AdminServiceImpl.java:659)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.console.core.mbean.MBeanHelper.invoke(MBeanHelper.java:141)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.console.appdeployment.ApplicationDeploymentCollectionAction.perform(ApplicationDeploymentCollectionAction.java:315)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at org.apache.struts.action.ActionServlet.processActionPerform(ActionServlet.java:1791)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1586)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:510)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.StrictServletInstance.doService(StrictServletInstance.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._service(StrictLifecycleServlet.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.IdleServletState.service(StrictLifecycleServlet.java:313)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.service(StrictLifecycleServlet.java(Inlined Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletInstance.service(ServletInstance.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ValidServletReferenceState.dispatch(ValidServletReferenceState.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletInstanceReference.dispatch(ServletInstanceReference.java(Inlined Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java(Compiled Code))
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:200)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.srt.WebAppInvoker.doForward(WebAppInvoker.java:119)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.srt.WebAppInvoker.handleInvocationHook(WebAppInvoker.java:276)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.cache.invocation.CachedInvocation.handleInvocation(CachedInvocation.java:71)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.cache.invocation.CacheableInvocationContext.invoke(CacheableInvocationContext.java:114)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.srp.ServletRequestProcessor.dispatchByURI(ServletRequestProcessor.java:186)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.oselistener.OSEListenerDispatcher.service(OSEListener.java:334)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.webcontainer.http.HttpConnection.handleRequest(HttpConnection.java:56)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java:618)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.http.HttpConnection.run(HttpConnection.java:439)
[07-3-15 22:59:48:250 CST] 4379df48 SystemErr     R 	at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java(Compiled Code))
[07-3-15 22:59:48:703 CST] 4379df48 SystemErr     R log4j:WARN No appenders could be found for logger (freemarker.cache).
[07-3-15 22:59:48:703 CST] 4379df48 SystemErr     R log4j:WARN Please initialize the log4j system properly.

[07-3-15 22:59:44:406 CST] 4379df48 SecurityManag W SECJ0314W: 当前 Java 2 安全性策略报告了违犯 Java 2 安全性许可权的潜在可能。请参阅《问题确定指南》，获取进一步信息。

 许可权：

      suppressAccessChecks : access denied (java.lang.reflect.ReflectPermission suppressAccessChecks)


 代码：

     org.apache.commons.beanutils.MethodUtils  in  {file:/D:/Program Files/WebSphere/AppServer/installedApps/test/zycms3.ear/zycms3.war/WEB-INF/lib/commons-beanutils.jar}



 堆栈跟踪：

java.security.AccessControlException: access denied (java.lang.reflect.ReflectPermission suppressAccessChecks)
	at java.security.AccessControlContext.checkPermission(AccessControlContext.java(Compiled Code))
	at java.security.AccessController.checkPermission(AccessController.java(Compiled Code))
	at java.lang.SecurityManager.checkPermission(SecurityManager.java(Compiled Code))
	at com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java(Compiled Code))
	at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java(Compiled Code))
	at org.apache.commons.beanutils.MethodUtils.getMatchingAccessibleMethod(MethodUtils.java:558)
	at org.apache.commons.beanutils.MethodUtils.invokeMethod(MethodUtils.java:209)
	at org.apache.commons.digester.SetNextRule.end(SetNextRule.java:260)
	at org.apache.commons.digester.Digester.endElement(Digester.java:1036)
	at org.apache.xerces.parsers.AbstractSAXParser.endElement(Unknown Source)
	at org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown Source)
	at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown Source)
	at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source)
	at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
	at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
	at org.apache.xerces.parsers.DTDConfiguration.parse(Unknown Source)
	at org.apache.xerces.parsers.XMLParser.parse(Unknown Source)
	at org.apache.xerces.parsers.AbstractSAXParser.parse(Unknown Source)
	at org.apache.commons.digester.Digester.parse(Digester.java:1514)
	at net.sf.navigator.menu.MenuRepository.load(MenuRepository.java:214)
	at net.sf.navigator.menu.MenuPlugIn.init(MenuPlugIn.java:59)
	at org.apache.struts.action.ActionServlet.initModulePlugIns(ActionServlet.java:1158)
	at org.apache.struts.action.ActionServlet.init(ActionServlet.java:473)
	at com.zytech.cms.commons.web.CmsActionServlet.init(CmsActionServlet.java:20)
	at javax.servlet.GenericServlet.init(GenericServlet.java:258)
	at com.ibm.ws.webcontainer.servlet.StrictServletInstance.doInit(StrictServletInstance.java:82)
	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._init(StrictLifecycleServlet.java:147)
	at com.ibm.ws.webcontainer.servlet.PreInitializedServletState.init(StrictLifecycleServlet.java:270)
	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.init(StrictLifecycleServlet.java:113)
	at com.ibm.ws.webcontainer.servlet.ServletInstance.init(ServletInstance.java:189)
	at javax.servlet.GenericServlet.init(GenericServlet.java:258)
	at com.ibm.ws.webcontainer.webapp.WebAppServletManager.addServlet(WebAppServletManager.java:870)
	at com.ibm.ws.webcontainer.webapp.WebAppServletManager.loadServlet(WebAppServletManager.java:224)
	at com.ibm.ws.webcontainer.webapp.WebAppServletManager.loadAutoLoadServlets(WebAppServletManager.java:542)
	at com.ibm.ws.webcontainer.webapp.WebApp.loadServletManager(WebApp.java:1277)
	at com.ibm.ws.webcontainer.webapp.WebApp.init(WebApp.java:283)
	at com.ibm.ws.webcontainer.srt.WebGroup.loadWebApp(WebGroup.java:387)
	at com.ibm.ws.webcontainer.srt.WebGroup.init(WebGroup.java:209)
	at com.ibm.ws.webcontainer.WebContainer.addWebApplication(WebContainer.java:987)
	at com.ibm.ws.runtime.component.WebContainerImpl.install(WebContainerImpl.java:136)
	at com.ibm.ws.runtime.component.WebContainerImpl.start(WebContainerImpl.java:356)
	at com.ibm.ws.runtime.component.ApplicationMgrImpl.start(ApplicationMgrImpl.java:418)
	at com.ibm.ws.runtime.component.DeployedApplicationImpl.fireDeployedObjectStart(DeployedApplicationImpl.java:787)
	at com.ibm.ws.runtime.component.DeployedModuleImpl.start(DeployedModuleImpl.java:354)
	at com.ibm.ws.runtime.component.DeployedApplicationImpl.start(DeployedApplicationImpl.java:575)
	at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplication(ApplicationMgrImpl.java:271)
	at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplication(ApplicationMgrImpl.java:488)
	at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java(Compiled Code))
	at java.lang.reflect.Method.invoke(Method.java(Compiled Code))
	at com.tivoli.jmx.modelmbean.MMBInvoker.invoke(MMBInvoker.java:46)
	at com.tivoli.jmx.modelmbean.MMBInvoker.invokeOperation(MMBInvoker.java:115)
	at com.tivoli.jmx.modelmbean.DynamicModelMBeanSupport.invoke(DynamicModelMBeanSupport.java:409)
	at javax.management.modelmbean.RequiredModelMBean.invoke(RequiredModelMBean.java:323)
	at com.tivoli.jmx.GenericMBeanSupport.invoke(GenericMBeanSupport.java:178)
	at com.tivoli.jmx.MBeanAccess.invoke(MBeanAccess.java:113)
	at com.tivoli.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:290)
	at com.ibm.ws.management.AdminServiceImpl.invoke(AdminServiceImpl.java:659)
	at com.ibm.ws.console.core.mbean.MBeanHelper.invoke(MBeanHelper.java:141)
	at com.ibm.ws.console.appdeployment.ApplicationDeploymentCollectionAction.perform(ApplicationDeploymentCollectionAction.java:315)
	at org.apache.struts.action.ActionServlet.processActionPerform(ActionServlet.java:1791)
	at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1586)
	at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:510)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled Code))
	at com.ibm.ws.webcontainer.servlet.StrictServletInstance.doService(StrictServletInstance.java(Compiled Code))
	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._service(StrictLifecycleServlet.java(Compiled Code))
	at com.ibm.ws.webcontainer.servlet.IdleServletState.service(StrictLifecycleServlet.java:313)
	at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.service(StrictLifecycleServlet.java(Inlined Compiled Code))
	at com.ibm.ws.webcontainer.servlet.ServletInstance.service(ServletInstance.java(Compiled Code))
	at com.ibm.ws.webcontainer.servlet.ValidServletReferenceState.dispatch(ValidServletReferenceState.java(Compiled Code))
	at com.ibm.ws.webcontainer.servlet.ServletInstanceReference.dispatch(ServletInstanceReference.java(Inlined Compiled Code))
	at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java(Compiled Code))
	at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java(Compiled Code))
	at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:200)
	at com.ibm.ws.webcontainer.srt.WebAppInvoker.doForward(WebAppInvoker.java:119)
	at com.ibm.ws.webcontainer.srt.WebAppInvoker.handleInvocationHook(WebAppInvoker.java:276)
	at com.ibm.ws.webcontainer.cache.invocation.CachedInvocation.handleInvocation(CachedInvocation.java:71)
	at com.ibm.ws.webcontainer.cache.invocation.CacheableInvocationContext.invoke(CacheableInvocationContext.java:114)
	at com.ibm.ws.webcontainer.srp.ServletRequestProcessor.dispatchByURI(ServletRequestProcessor.java:186)
	at com.ibm.ws.webcontainer.oselistener.OSEListenerDispatcher.service(OSEListener.java:334)
	at com.ibm.ws.webcontainer.http.HttpConnection.handleRequest(HttpConnection.java:56)
	at com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java:618)
	at com.ibm.ws.http.HttpConnection.run(HttpConnection.java:439)
	at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java(Compiled Code))


 代码基本位置：


com.ibm.ws.security.core.SecurityManager : file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar
  ClassLoader: com.ibm.ws.bootstrap.ExtClassLoader
  Permissions granted to CodeSource (file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar <no certificates>)
  {
    (java.io.FilePermission \D:\Program Files\WebSphere\AppServer\lib\securityimpl.jar read);
  }
com.ibm.ws.security.core.SecurityManager$2 : file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar
  ClassLoader: com.ibm.ws.bootstrap.ExtClassLoader
  Permissions granted to CodeSource (file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar <no certificates>)
  {
    (java.io.FilePermission \D:\Program Files\WebSphere\AppServer\lib\securityimpl.jar read);
  }
com.ibm.ws.security.util.AccessController : file:/D:/Program%20Files/WebSphere/AppServer/lib/bootstrap.jar
  ClassLoader: sun.misc.Launcher$AppClassLoader
  Permissions granted to CodeSource (file:/D:/Program%20Files/WebSphere/AppServer/lib/bootstrap.jar <no certificates>)
  {
    (java.io.FilePermission \D:\Program Files\WebSphere\AppServer\lib\bootstrap.jar read);
    (java.lang.RuntimePermission exitVM);
  }
com.ibm.ws.security.core.SecurityManager : file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar
  ClassLoader: com.ibm.ws.bootstrap.ExtClassLoader
  Permissions granted to CodeSource (file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar <no certificates>)
  {
    (java.io.FilePermission \D:\Program Files\WebSphere\AppServer\lib\securityimpl.jar read);
  }
com.ibm.ws.security.core.SecurityManager : file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar
  ClassLoader: com.ibm.ws.bootstrap.ExtClassLoader
  Permissions granted to CodeSource (file:/D:/Program Files/WebSphere/AppServer/lib/securityimpl.jar <no certificates>)
  {
    (java.io.FilePermission \D:\Program Files\WebSphere\AppServer\lib\securityimpl.jar read);
  }
java.lang.reflect.AccessibleObject : null code source
  ClassLoader: Primordial Classloader
  Permissions granted to CodeSource null
  {
    (java.security.AllPermission <all permissions> <all actions>);
  }
org.apache.commons.beanutils.MethodUtils : file:/D:/Program Files/WebSphere/AppServer/installedApps/test/zycms3.ear/zycms3.war/WEB-INF/lib/commons-beanutils.jar
  ClassLoader: com.ibm.ws.classloader.CompoundClassLoader
  Permissions granted to CodeSource (file:/D:/Program Files/WebSphere/AppServer/installedApps/test/zycms3.ear/zycms3.war/WEB-INF/lib/commons-beanutils.jar <no certificates>)
  {
    (java.io.FilePermission d:\Program Files\WebSphere\AppServer\java\jre\lib\ext\mail.jar read);
    (java.io.FilePermission d:\Program Files\WebSphere\AppServer\java\jre\lib\ext\activation.jar read);
    (java.io.FilePermission d:\Program Files\WebSphere\AppServer\java\jre\lib\xml.jar read);
    (java.io.FilePermission d:\Program Files\WebSphere\AppServer\installedApps\test\zycms3.ear\zycms3.war\- read,write);
    (java.lang.RuntimePermission loadLibrary.*);
    (java.lang.RuntimePermission queuePrintJob);
    (java.util.PropertyPermission java.specification.vendor read);
    (java.util.PropertyPermission java.vm.specification.vendor read);
    (java.util.PropertyPermission path.separator read);
    (java.util.PropertyPermission java.vm.name read);
    (java.util.PropertyPermission java.class.version read);
    (java.util.PropertyPermission os.name read);
    (java.util.PropertyPermission java.vendor.url read);
    (java.util.PropertyPermission java.vendor read);
    (java.util.PropertyPermission java.vm.vendor read);
    (java.util.PropertyPermission file.separator read);
    (java.util.PropertyPermission os.version read);
    (java.util.PropertyPermission java.vm.version read);
    (java.util.PropertyPermission java.version read);
    (java.util.PropertyPermission line.separator read);
    (java.util.PropertyPermission * read);
    (java.util.PropertyPermission java.vm.specification.version read);
    (java.util.PropertyPermission java.specification.name read);
    (java.util.PropertyPermission java.vm.specification.name read);
    (java.util.PropertyPermission java.specification.version read);
    (java.util.PropertyPermission os.arch read);
    (java.net.SocketPermission * connect,resolve);
    (java.net.SocketPermission localhost:1024- listen,resolve);
  }

• 快来参加7月17日在成都举行的SOA中国技术论坛
• Oracle专区上线，有Oracle最新文章，重要下载及知识库等精彩内容，欢迎访问。
• 搜狐网站诚聘Java、PHP和C++工程师
• JavaEye问答大赛开始了！ 从6月23日 至 7月6日，奖品丰厚 ！
• 北京: 千橡集团暨校内网诚聘软件研发工程师