[ת]PHP ÖÐÇÉÓÃÊý×é½µµÍ³ÌÐòµÄʱ¼ä¸´ÔÓ¶È
PHP ÖÐÇÉÓÃÊý×é½µµÍ³ÌÐòµÄʱ¼ä¸´ÔÓ¶È
Íõ µ¤µ¤, ¸ß¼¶Èí¼þ¹¤³Ìʦ, IBM
2009 Äê 11 ÔÂ 26 ÈÕ
±¾ÎÄÖ÷ÒªÊǽéÉÜÔÚ PHP µÄ±à³ÌÖУ¬ÈçºÎÇÉÓÃÊý×éÀ´½µµÍÒò¶à²ãÑ»·¶øÒýÆðµÄʱ¼ä¸´ÔӶȵÄÎÊÌâ¡£ÌØ±ðÊǵ±³ÌÐòÐèÒª¶à´ÎÓëÊý¾Ý¿â½»»¥Ê±£¬Óô˷½·¨À´ÓÅ»¯ÄãµÄ´úÂ룬½«»á´ø¸øÒâÏë²»µ½µÄЧ¹û¡£
ͨ³£¿ª·¢ÈËÔ±ÔÚд³ÌÐòµÄʱºò£¬ÍùÍùÊǰÑÒѾÉè¼ÆºÃ»òÕß¹¹Ë¼ºÃµÄÔËËãÂß¼£¬Ö±½ÓÓñà³ÌÓïÑÔ·Òë³öÀ´¡£³ÌÐòÄÜ˳Àû±àÒëͨ¹ý£¬ÄÇÊǺÜÁîÈ˸ßÐ˵ÄÊÂÇé¡£Èç¹û´Ëʱ³ÌÐòµÄÔËÐÐʱ¼ä»¹ÄܽÓÊÜ£¬¾Í»á³Á½þÔÚд´úÂëµÄ³É¾Í¸Ðµ±ÖУ¬³£³£ÔÚÕâ¸ö¹ý³ÌÖкöÂÔ´úÂëµÄÓÅ»¯¡£Ö»Óе±³ÌÐòÔËÐÐËÙ¶ÈÊܵ½Ó°Ïìʱ£¬²Å»Ø¹ýÍ·È¥¿¼ÂÇÓÅ»¯µÄÊÂÇé¡£
ʲôÊÇËã·¨µÄʱ¼ä¸´ÔÓ¶È
ʱ¼ä¸´ÔÓ¶ÈÊÇ¿ª·¢ÈËÔ±ÓÃÀ´ºâÁ¿Ó¦ÓóÌÐòËã·¨ÓÅÁÓµÄÖ÷ÒªÒòËØ¡£¿Í¹ÛµØËµ£¬Ëã·¨µÄÓÅÁÓ³ýÁ˺Íʱ¼ä¸´ÔÓ¶ÈÓйأ¬»¹Óë¿Õ¼ä¸´ÔÓ¶ÈÃÜÇÐÏà¹Ø¡£¶øËæ×ÅÉ豸Ӳ¼þÅäÖõIJ»¶ÏÌáÉý£¬¶ÔÖÐСÐÍÓ¦ÓóÌÐòÀ´Ëµ£¬¶ÔËã·¨µÄ¿Õ¼ä¸´ÔӶȵÄÒªÇóÒ²¿íËÉÁ˲»ÉÙ¡£²»¹ý£¬ÔÚµ±½ñ Web2.0 ʱ´ú£¬¶ÔÓ¦ÓóÌÐòµÄʱ¼ä¸´ÔÓ¶ÈÈ´ÓÐÁ˸ü¸ßµÄÒªÇó¡£
ʲôÊÇËã·¨µÄʱ¼ä¸´ÔÓ¶ÈÄØ£¿¸ÅÒªÀ´Ëµ£¬ÊÇÖ¸´ÓËã·¨ÖÐѡȡһ¸öÄÜ´ú±íËã·¨µÄÔ²Ù×÷£¬ÒÔÔ²Ù×÷ÖØ¸´Ö´ÐеĴÎÊý×÷ΪËã·¨µÄʱ¼äÁ¿¶È¡£Ó°Ïìʱ¼ä¸´ÔӶȵÄÒòËØÓÐÁ½¸ö£ºÒ»ÊÇÔ²Ù×÷µÄÖ´ÐÐʱ¼ä£¬¶þÊÇÔ²Ù×÷Òò¿ØÖƽṹÒýÆðµÄÖ´ÐдÎÊý¡£Òª°ÑËã·¨µÄʱ¼ä¸´ÔӶȽµÏÂÀ´£¬½µµÍÔ²Ù×÷µÄÖ´ÐдÎÊýÊǽÏΪÈÝÒ׵ķ½·¨£¬Ò²ÊÇÖ÷Òª·½·¨¡£±¾ÎÄËù½²ÊöµÄ·½·¨£¬ÊÇͨ¹ýÇÉÓà PHP µÄÊý×飬½µµÍÔ²Ù×÷µÄÖ´ÐдÎÊý£¬´Ó¶ø´ïµ½½µµÍË㷨ʱ¼ä¸´ÔӶȵÄÐèÇ󣬺ʹó¼Ò·ÖÏí¡£
Ëã·¨µÄʱ¼äÁ¿¶È¼Ç×÷ T(n)=O(f(n))£¬Ëü±íʾËã·¨Öлù±¾²Ù×÷ÖØ¸´Ö´ÐеĴÎÊýÊÇÎÊÌâ¹æÄ£ n µÄij¸öº¯Êý f(n)£¬Ò²¾ÍÊÇËµËæ×ÅÎÊÌâ¹æÄ£ n µÄÔö´ó£¬Ëã·¨Ö´ÐÐʱ¼äµÄÔö³¤ÂÊºÍ f(n) µÄÔö³¤ÂÊÏàͬ¡£¶àÊýÇé¿öÏ£¬ÎÒÃǰÑ×îÉî²ãÑ»·ÄÚµÄÓï¾ä×÷ΪԲÙ×÷À´ÌÖÂÛËã·¨µÄʱ¼ä¸´ÔÓ¶È£¬ÒòΪËüµÄÖ´ÐдÎÊýºÍ°üº¬ËüµÄÓï¾äµÄƵ¶ÈÏàͬ¡£Ò»°ãÇé¿öÏ£¬¶ÔÒ»¸öÎÊÌâÖ»ÐèÑ¡ÔñÒ»ÖÖ»ù±¾²Ù×÷À´ÌÖÂÛËã·¨µÄʱ¼ä¸´ÔӶȼ´¿É¡£ÓÐʱҲÐèҪͬʱ¿¼ÂǶàÖÖ»ù±¾²Ù×÷¡£
ÔÚ Web ¿ª·¢ÖУ¬Í¨³£Ò»¸ö¹¦ÄܵÄÖ´ÐÐʱ¼ä»òÏìӦʱ¼ä£¬²»½ö½ö¸ú·þÎñÆ÷µÄÏìÓ¦ÄÜÁ¦¡¢´¦ÀíÄÜÁ¦Óйأ¬»¹Éæ¼°µÚÈý·½¹¤¾ßµÄ½»»¥Ê±¼ä£¬Èç¶ÔÊý¾Ý¿âµÄÁ´½Óʱ¼äºÍ¶ÔÊý¾Ý½øÐдæÈ¡µÄʱ¼ä¡£Òò¶øÔÚÑ¡¶¨Ô²Ù×÷ÊÇ£¬ÐèÒª×ۺϿ¼ÂÇÓ¦ÓóÌÐò¸÷·½ÃæµÄÒòËØ£¬ÒÔ×î´óÓ°Ïì³ÌÐòÖ´ÐÐʱ¼äµÄ²Ù×÷ΪԲÙ×÷£¬À´ºâÁ¿Ëã·¨µÄʱ¼ä¸´ÔÓ¶È¡£Ò²¾ÍÊÇ˵£¬ÐèÒª³ÌÐòÔ±ÔÚ±àд´úÂëµÄʱºò£¬¶ÔÖØÒª²Ù×÷µÄÖ´ÐÐʱ¼äÄÜÓлù±¾µÄÈÏʶ¡£
»ØÒ³Ê×
³£¼û³ÌÐòÖÐ
Ïà¹ØÎĵµ£º
strtotimeº¯ÊýÊÇÒ»¸öºÜºÃµÄº¯Êý,Áé»îµÄÔËÓÃËü,»á¸øÄãµÄ¹¤×÷´øÀ´²»ÉÙ·½±ã.µ«PHPµÄÊÖ²áÖÐÈ´¶Ô´Ëº¯ÊýµÄ²ÎÊýû×÷Ì«¶à½éÉÜ,¶ÔЩº¯ÊýµÄÆäËû½éÉÜÒ²·Ç³£ÉÙ¡£
ÏÈ¿´ÊÖ²á½éÉÜ£º
strtotime — ½«ÈκÎÓ¢ÎÄÎı¾µÄÈÕÆÚʱ¼äÃèÊö½âÎöΪ Unix ʱ¼ä´Á
¸ñʽ£ºint strtotime ( string $time [, int $now ] )
¡¡¡¡±¾º¯ÊýÔ¤ÆÚ½ÓÊÜÒ ......
javaµÄд·¨
/**
*
* @param location
* @param nameList±£´æ½á¹ûµÄ£¡
*/
public void listDict(String location, List<String> nameList) {
File fileList = new File(location);
if (fileList.isDirectory()) {
File[] files = fileList.listFiles();
for (File f : files) {
i ......
½â¾öµÄ°ì·¨Óкü¸¸ö£º
µÚÒ»¸öÊÇ£ºstr_split()£¬Õâ¸ö·½·¨ÊÇPHP5¼ÓÈëµÄ¡£
<?php
$str = "Hello Friend";
$arr1 = str_split($str);
$arr2 = str_split($str, 3);
print_r($arr1);
print_r($arr2);
?>
Êä³ö¾ÍÊÇ£º
Array
(
[0] => H
[1] => e
[2] => l
[3] => l
......
×öPHP³ÌÐòµÄÈ˶¼ÖªµÀhtmlentitiesºÍhtmlspecialcharsº¯Êý£¬¶¼ÊǸñʽ»¯html´úÂëµÄ£¬µ«ÊÇÕâ¶þ¸öº¯ÊýÊÇ·ñÕæµÄ¹¦ÄÜÒ»ÑùÂ𣿠php³ÌÐòÔ±Ö®¼Ò ÕâÁ½¸öº¯ÊýÔÚ¸ñʽ»¯´øÓÐÓ¢ÎÄ×Ö·ûµÄhtml´úÂëµÄʱºò»ù±¾Ã»É¶ÎÊÌ⣬µ«ÊÇhtmlentities¶ÔÖÐÎÄ×Ö·ûÒ²²»·Å¹ý£¬ÕâÑùµÃ³öÀ´µÄ½á¹ûÊÇÖÐÎÄ×Ö·û²¿·Ö±äΪһ¶ÑÂÒÂë¡£µ±Ê±×öÓ¢ÎÄÕ¾µÄʱºò¸ù±¾¾Íû¾õ²ìµ ......
OpenX adserver version 2.8.1 and lower is vulnerable to remote code
execution. To be exploited, this vulnerability requires banner / file
upload permissions, such as granted to the 'advertiser' and
'administrator' roles.
This vulnerability is caused by the (insecure) file upload mechanism of
af ......