大漠孤狼网迹

官方地址：http://www.shopex.cn

国内使用最广泛的网店程序，使用PHP+MySQL架构，安全性好，易用性好。

特点：

1。集成了国内及国际常用的支付网关，设置比较容易，尤其对于做国际客户生意的商家比较方便。

2。支持中英文模板及后台，可以用来做面向国外客户的英文网店。

3。可以与Discuz完美整合。

4。后台操作桌面化，适合非专业的做站

5。单店版免费，有支持论坛。

其他关于购物方面有很多细致的功能方面的设置，请大家参考网站的详细介绍。

推荐等级：★★★★★

gzip可以将页面压缩以后传输，可以极大地提高网页的访问速度，尤其是使用国外主机的朋友，能获得成倍的速度提升。

很多程序都设置好了gzip功能，只要在后台启用即可，例如discuz，phpwind，wordpress等。由于访问网站的速度限制主要在于带宽，尤其是对于国外主机更是如此，而服务器的执行时间反而微不足道，所以会发现一个现象，开启的gzip的页面的访问速度要比静态页面还要快。

如果程序没有设置gzip的，可以在php文件的最顶部中加入

ob_start(”ob_gzhandler”);

来启用gzip。

还可以通过.htaccess来设置，在.htaccess中加入

php_flag zlib.output_compression on
php_value zlib.output_compression_level 2

这里有一个测试页面是否压缩的网站，输入网址之后可以测试页面是否已经压缩，如果压缩的页面大小，速度的差异等等，大家可以来测试一下：

http://www.port80software.com/products/httpzip/compresscheck

我用在页面增加ob_start(”ob_gzhandler”);的方法为网站RSS21启用的gzip压缩，感觉速度确实快了很多。下图是用上面的网站测试的结果，效果非常明显。

PHP页面都可以使用gzip进行压缩，但是静态页面如何压缩没找到很好的方法。一种可以通过PHP调用来压缩静态页面，还有一种就是可以通过rewrite，但都不是很好。好像有一个模块可以直接压缩静态页面和CSS文件，但是需要apache2.0以上支持。

刚刚看到wordpress 网站的通知,黑客入侵了他们的一个服务器,篡改了wordpress 2.1.1的源代码,要求下载了wordpress 2.1.1的用户尽快升级到2.1.2.下面是原文:
Long story short: If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.

Longer explanation: This morning we received a note to our security mailing address about unusual and highly exploitable code in WordPress. The issue was investigated, and it appeared that the 2.1.1 download had been modified from its original code. We took the website down immediately to investigate what happened.

It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.

This is the kind of thing you pray never happens, but it did and now we’re dealing with it as best we can. Although not all downloads of 2.1.1 were affected, we’re declaring the entire version dangerous and have released a new version 2.1.2 that includes minor updates and entirely verified files. We are also taking lots of measures to ensure something like this can’t happen again, not the least of which is minutely external verification of the download package so we’ll know immediately if something goes wrong for any reason.

Finally, we reset passwords for a number of users with SVN and other access, so you may need to reset your password on the forums before you can login again.

What You Can Do to Help

If your blog is running 2.1.1, please upgrade immediately and do a full overwrite of your old files, especially those in wp-includes. Check out your friends blogs and if any of them are running 2.1.1 drop them a note and, if you can, pitch in and help them with the upgrade.

If you are a web host or network administrator, block access to “theme.php” and “feed.php”, and any query string with “ix=” or “iz=” in it. If you’re a customer at a web host, you may want to send them a note to let them know about this release and the above information.

Thanks to Ryan, Barry, Donncha, Mark, Michael, and Dougal for working through the night to figure out and address this problem, and thanks to Ivan Fratric for reporting it in the first place.

去年10月中国互联网开始严打，打击重点是盗版，但是今天看看，百度的mp3站依然安然无恙，死掉的都是些不知名的小站。前两年有过一次重点打击黄色网站，声势浩大，个人网站死掉成千上万，很多与情色沾边的都被严打，可是那些门户娱乐网站，照样提供情色信息，准色情内容。

再说垃圾软件，哪个不是大站做出来的。国内几个出名的大站都牵扯其中，百度，雅虎，易趣，甚至是中国互联网管理中心。

信产部去年搞出一个网站备案，功效如何，我们暂且不说，我想大大小小的站长们自然会心中有数。既然信产部具有如此决心，为什么已经成为中国互联网公害的流氓软件却视而不见。流氓就那么几家，我想长着眼睛的人就可以看到的，为什么偏偏他们看不到？法律空白，还不知道要空白到什么时候。。。

中国互联网最严重的两个问题是什么？我想大概以下两个问题可以入选：第一个是电信网通的互联互通；第二个就是流氓软件在网络的肆虐。

第一个问题据说已经在解决了，可是现在，访问电信的很多网站的速度竟然没有访问国外网站的速度快！！

而流氓软件的问题，有的只是闹剧，不知道网民的利益谁来保护。事实大家都清楚，我想法官们也不会任由那些流氓软件安装到自己的电脑吧，可是结果却扑朔迷离。

【用户查杀恶意软件TOP10播报】

Cnnic中文上网