phpһЩ»ù´¡µÄÎÊÌâ - PHP / »ù´¡±à³Ì
¸Õ½Ó´¥php£¬Óм¸¸öµØ·½¸Ð¾õºÜ²»Çå³þ
1.±ÈÈçÓиöĿ¼
http://192.168.0.2/www/index.php
Ò»°ã´«µÝ²ÎÊýÓ¦¸ÃÏñÕâÑù
http://192.168.0.2/www/index.php?var=val,
Èç¹ûindex.phpĬÈϵϰӦ¸Ã¿ÉÒÔд³É
http://192.168.0.2/www/?var=val£¬
µ«ÎÒ¿´µ½µÄÊÇ
http://192.168.0.2/www/?val
ÕâÖÖÑùʽµÄ£¬why£¿ÈçºÎ»ñÈ¡ÄØ£¿£¨²»È·¶¨valÊDz»ÊÇÖµ£¬Ö»ÊǸоõÓ¦¸ÃÊÇ£©
2.ÉÏÃæµÄindex.phpÄÚÈÝÊÇ
PHP code:
header("location:./abc/index.php");
exit();
Õâ¸öÓ¦¸ÃÊÇÌø×ªµ½abcĿ¼µÄindex.phpÁË£¬¸Õ²Åhttp://192.168.0.2/www/?val ÖУ¬valÒ²´«¹ýÈ¥ÁË£¿
·¿´Ò»ÏÂwww/abc/index.php£¬·¢ÏÖ$_SCONFIG¡¢$_SGETÕâÑùµÄ±äÁ¿£¬ÊÇϵͳ±äÁ¿Ã´£¿
ÈçºÎÇø·ÖÊÇ×Ô¶¨Ò廹ÊÇϵͳµÄ£¿£¨ÓüÇʱ¾¿´µÄ£¬Ò²Ã»ÑÕÉ«Ìáʾ£©
ÎÊÌâÓеãÂÞ࣬²»¹ý¸Õ½Ó´¥phpȷʵÓеãÔΣ¬Íû¸÷λǰ±²Ö¸½Ì
²¹³ä¸öÎÊÌ⣺
3. $_GET["id"],Èç¹ûûÓд«¹ýÀ´»áÌáʾ Undefined index: id£¬Õâ¸öÔõô½â¾ö£¿¾ÍÊÇû´©¹ýÀ´¾ÍÊÇֵΪ¡°¡±¾ÍÊÇÁË£¿
ÎÊÌâ1:ºÃÏñÊÇ$_SERVER["QUERY_STRING"]£¿ÕâÑùдÓÐɶºÃµÄ¡£¡£
Õâ»°²»Ì«Ã÷°×£¬ÊÇ˵¡°var=val¡±±¾Éí¿ÉÒÔËãÒ»¸öÖµ£¿¾Í¿´ÎÒÔõô¿´ÁË£¿
ÆäËû»Ø´ðµÄͦÇå³þ¡£Ë¬¿ì
Ïà¹ØÎÊ´ð£º
ÔÚfirefoxä¯ÀÀÆ÷ÏÂÕý³£µÇ½£¬µ«ÔÚIE ä¯ÀÀÆ÷ÏÂÎÞ·¨µÇ½£¬Ã¿´Î¶¼»áÖØÐÂÉú³ÉÒ»¸ösession,ÔÀ´µÄÄÚÈݻᶪʧ¡£¡£¡£¡£¡£¡£¡£¡£¡£¡£Ôõô»ØÊÂ......
¾ßÌåÇé¿ö£¿²Â²â¿ÉÄÜÊÇÄã±¾»úIEµÄcookie±»½ûÓÃÁ˰ɣ¬¿ÉÒÔ¿´¿´
cookie Æ ......
ÈçÌ⣬Ôõôд¸öheadÍ·²¿ ÈÃÒ³Ãæ»º´æ1ÐÇÆÚ¡£
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
Äã°ÑÀïÃæµÄʱ¼ä£¬¸Ä³Éµ±Ç°Ê±¼ä¼ÓÉÏÒ»¸öÐÇÆÚ
¼ÇµÃҪת»»³Égmtʱ¼ä
ÎÒÕâÑùдµÄ ²»ÖªµÀÐв»ÐС£
Ò»¸öÐ ......
Çë½Ì¸ßÊÖ°ïæ£¬session_start£¨£©·ÅÔÚÍⲿµÄÎļþÓà require »ò include °üº¬½øÀ´£¬ÇëÎÊÕâÑù×öºÏÀíÂ𣿣¿´úÂëÔËÐÐÊÇÕý³£µÄ£¬ÕâÑù×öºÏÀíÂ𣿣¿Çë¸ßÊÖÖ¸µã¡£¡£¡£¡£ лл····
require »ò include ......
¼±Çó£ºÔÚphp½Å±¾ÀïÔõôµ÷ÓÃjsÎļþÀï·½·¨£¿
»òÕßÔÚjsÎļþÀïµ÷ÓÃphpÎļþдµÄseesion£¿
PHP¸ÕÈëÃÅѧϰ,ÓÑÇé¶¥Ò»¸ö
¼±Çó£ºÔÚphp½Å±¾ÀïÔõôµ÷ÓÃjsÎļþÀï·½·¨£¿
//echo '<script>alert("ok");< ......
ÎÒÒª×öÒ»¸ö»áÔ±×¢²áÆä±ØÐëÒªÊäÈëÊÖ»úºÅ»ñµÃÊÖ»úÑéÖ¤Â룬ÄãÃÇ˻ᰡ£¡
ÏȽøÐÐÊÖ»úÑéÖ¤»¹ÊÇÏÈ×¢²áÔÙÑéÖ¤£¿
ÐèҪʵÏÖÑéÖ¤Âë¶ÌÐÅ·¢Ë͵½ÊÖ»úÄÇÖÖ°É¡£ÐèÒª¶ÌÐŽӿڻòÕßÂò¸ö¶ÌÐÅè½øÐпª·¢
ÐèÒª½Ó¿ÚµÄ
²Î¿¼µØÖ·£ºht ......