PHP 中巧用数组降低程序的时间复杂度
OpenX adserver version 2.8.1 and lower is vulnerable to remote code
execution. To be exploited, this vulnerability requires banner / file
upload permissions, such as granted to the 'advertiser' and
'administrator' roles.
This vulnerability is caused by the (insecure) file upload mechanism of
affected OpenX versions. These would check magic bytes of an uploaded
file to determine its MIME type, and erroneously assume this
information to be reliable. Additionally, while the file name of
uploaded files is changed, the file extension is not.
As such, it is possible to upload image files with embedded PHP code and
.php file extension. Unless PHP script execution is explicitly prevented
for the file upload location (which has not been documented in the OpenX
manual so far and it is not the result of a default installation), the
PHP code will execute as soon as HTTP access to the file location will
cause it to be executed by the web server.
To clarify, an attacker exploiting this security issue does require
prior access to OpenX, i.e. exploitation is only possible after
successful authentication. On the other hand, advertiser access is a
rather low permission level and should not allow for system access.
If these bugs were not hidden from OpenX' bug tracker, you could read up
more about issue X-5747 here:
https://developer.openx.org/jira/browse/OX/fixforversion/10910
OpenX 2.8.2 has already been released in October to fix this issue and
can be downloaded from Roll forming machine
http://www.openx.org/ad-server/download
Moritz Naumann
Naumann IT Security Consulting
Berlin, Germany
http://www.moritz-naumann.com/
相关文档：
PHP 5.2 及以上版本提供了 json_encode 和 json_decode 函数，相当好用。
而之前的版本则需要下载网友们自行开发的库（有兴趣的可以看下 http://code.itlearner.com/php/JSON-class.html ）
可以参考如下这个方法来在低版本上扩充这两个函数：
if (!function_exists('json_encode') && !function_exists('j ......
尽量使用单引号而不是双引号。
尽量使用带条件的include而不是require。
尽量使用echo而不是print。
尽量使用内嵌的HTML而不是echo。
尽量使用str－replace()而不是ereg－replace()。
尽量sql不用联合查询。
......
MySQL+PHP产生乱码原因：
◆ MySQL数据库默认的编码是utf8,如果这种编码与你的PHP网页不一致,可能就会造成MySQL乱码;
◆ MySQL中创建表时会让你选择一种编码,如果这种编码与你的网页编码不一致,也可能造成MySQL乱码;
◆ MySQL创建表时添加字段是可以选择编码的,如果这种编码与你的网页编码不一致,也可能造成 ......
一直都以为在PHP中，' 和"是没有区别的，今天看了中原大学孙仲岳老师的视频教程，才发现，这两者用法是有区别的，举个简单的例子：
1.php
<?$str='冰冻鱼';
echo '$str 的博客地址是http://www.webxuexi.net' ;//注意这里是单引号哦
?>
2.php
<?
$str='冰冻鱼';
echo ......
网上关于这类的帖子真的很多，但是我试了很多，例如把php plus for eclipse 下载下来，解压后放到Eclipse的plugin里面，但是不知道为什么，都不管用。
我从网上找到了一种比较简单的方法：那就是由Eclipse自己来更新自己的组件，这样的方法省去了很多的配置，可以直接� ......
