Ò׽ؽØÍ¼Èí¼þ¡¢µ¥Îļþ¡¢Ãâ°²×°¡¢´¿ÂÌÉ«¡¢½ö160KB

PHPÉÏ´«Îļþ´óСÏÞÖÆ

/*
>>> Author: Áõ³¿êÍ 
>>> Date   : 2009-07-05
>>> EMAIL :
huichengongzi@gmail.com
>>> ×ªÔØÇë×¢Ã÷³ö´¦£¬Ð»Ð»ºÏ×÷£¡
*/
ÅäÖÃphp.iniÎļþ £¨ÒÔÉÏ´«500MÒÔÏ´óСµÄÎļþΪÀý£©
²éÕÒÒÔÏÂÑ¡Ïî²¢ÐÞ¸Ä->
       file_uploads = On               ;´ò¿ªÎļþÉÏ´«Ñ¡Ïî
       upload_max_filesize = 500M   ;ÉÏ´«ÎļþÉÏÏÞ
Èç¹ûÒªÉÏ´«±È½Ï´óµÄÎļþ£¬½ö½öÒÔÉÏÁ½Ìõ»¹²»¹»£¬±ØÐë°Ñ·þÎñÆ÷»º´æÉÏÏÞµ÷´ó£¬°Ñ½Å±¾×î´óÖ´ÐÐʱ¼ä±ä³¤
       post_max_size = 500M          ;postÉÏÏÞ
       max_execution_time = 1800     ; Maximum execution time of each script, in seconds½Å±¾×î´óÖ´ÐÐʱ¼ä
       max_input_time = 1800   ; Maximum amount of time each script may spend parsing request data
       memory_limit = 128M      ; Maximum amount of memory a script may consume (128MB)ÄÚ´æÉÏÏÞ


Ïà¹ØÎĵµ£º

ÔÚPHPÖÐͨ¹ýϵͳÐźÅÁ¿¼ÓËø·½Ê½»ñÈ¡µÝÔöÐòÁÐID

 Ç°Ò»Õó×Ó£¬Éè¼ÆLAJPʱÐèÒªÔÚPHPÖÐÉú³ÉΨһID£¬¿´ËÆÐ¡²ËÒ»µúÈ´×ÅʵÈÃÎÒΪÄÑÁË£¬ÔÚJavaÖÐÒ»¸öͬ²½·½·¨¼´¿É¸ã¶¨µÄÊ£¬µ«ÔÚPHPÖÐȴûÓкõĽâ¾ö˼·¡£
ÔÚÍøÉÏËÑÁËËÑ£¬ÓÐÁ½¸ö°ì·¨µ«¶¼²»Ì«ºÃ£ºÒ»¸öÊǼòµ¥µÄÒÔ½ø³ÌID+ʱ¼ä´Á£¬»ò½ø³ÌID+Ëæ»úÊýÀ´²úÉú½üËÆµÄΨһID£¬Ëä¼òµ¥µ«¶ÔÓÚ×·Çó“ÍêÃÀ”µÄÎÒ²»Ô¸ÕâÑù´ÕºÏ£¬ÔÙ˵ ......

PHPµÄip2longÓÐbug,É÷ÓÃ

ÏÈ¿´¿´Ï±ßÕâ¶ÎPHP´úÂë¡£Õâ¶ÎʹÓÃip2longº¯Êý£¬¶Ôͬһ¸öIP½øÐÐת»»¡£µ±È»£¬Ò²ÓÐÈËÈÏΪ58.99.011.1ºÍ058.99.011.1Ëã²»ÉϺϷ¨µÄ
IP£¬ÄǾÍReturn£¬´ËÎĶÔÄãûÓаïÖú¡£
ΪʲôҪʹÓôøÇ°µ¼ÁãµÄip£ºÎªÁËÔÚÊý¾Ý¿âÖвéѯ£¬Õâ¸ö¿ÉÒÔÔÚIP¿âÖж¨Î»µ½ipËù¶ÔÓ¦µÄλÖÃÐÅÏ¢¡£ËäȻûÓÐÕûÐ͵ÄIP²éѯЧÂʸߣ¬µ«±Ï¾¹Ö±¹Û°¡¡£
<?php
ech ......

PHPÍøÕ¾¿ª·¢¹ý³ÌÖÐ×¢ÒâÕâЩ°²È«ÖªÊ¶

1¡¢¹ÅÀÏµÄÆÛÆ­SQLÓï¾ä
ÔÚĬÈÏģʽÏ£¬¼´Ê¹ÊÇÄãÍüÁ˰Ñphp.ini¿½µ½/usr/local/lib/php.iniÏ£¬php»¹ÊÇ´ò¿ªmagic_quotes_gpc=on¡£
ÕâÑùËùÓдÓGET/POST/CookieÀ´µÄ±äÁ¿µÄµ¥ÒýºÅ(')¡¢Ë«ÒýºÅ(")¡¢·´Ð±¸Übackslash(\)ÒÔ¼°¿Õ×ÖÔªNUL
(the null byte)¶¼»á±»¼ÓÉÏ·´Ð±¸Ü£¬ÒÔʹÊý¾Ý¿âÄܹ»ÕýÈ·²éѯ¡£
µ«ÊÇÔÚphp-4-RC2µÄʱºòÒýÈë ......

ÖØÈ¼ÄãµÄPHP°²È«Ö®»ð

¶ÔÓڽű¾°²È«Õâ¸ö»°ÌâºÃÏñÓÀԶûÍêûÁË£¬Èç¹ûÄã¾­³£µ½¹úÍâµÄ¸÷ÖÖ¸÷ÑùµÄbugtraqÉÏ£¬Äã»á·¢ÏÖÓÐÒ»°ëÒÔÉ϶¼ºÍ½Å±¾Ïà¹Ø£¬ÖîÈçSQL
injection£¬XSS£¬Path Disclosure£¬Remote commands executionÕâÑùµÄ×ÖÑ۱ȱȽÔÊÇ£¬ÎÒÃÇ¿´ÁËÖ®ºóµÄÓÃ;ÄѵÀ½ö½öÊÇ×¥È⼦?¶ÔÓÚÎÒÃÇÏë×öweb°²È«µÄÈËÀ´Ëµ£¬×îºÃ¾ÍÊÇÄÃÀ´Ñ§Ï°
£¬¿ÉÊÇÍòÎï×¥¸ùÔ´£¬ÎÒà ......

Ewebeditor±à¼­Æ÷ǶÈëµ½PHPÍøÒ³ÖÐ

/*
>>>  Title    : Ewebeditor±à¼­Æ÷ǶÈëµ½PHPÍøÒ³ÖÐ
>>> Author: Áõ³¿êÍ 
>>> Date   : 2009-07-05
>>> EMAIL :
huichengongzi@gmail.com
>>> ×ªÔØÇë×¢Ã÷³ö´¦£¬Ð»Ð»ºÏ×÷£¡
*/
£¨1£©ÔÚ
</head>
֮ǰ¼ÓÉÏÏÂÃæÒ»¶Î´úÂ룺£¨µÃ ......
© 2009 ej38.com All Rights Reserved. ¹ØÓÚE½¡ÍøÁªÏµÎÒÃÇ | Õ¾µãµØÍ¼ | ¸ÓICP±¸09004571ºÅ