[ת]ϸ²ì PHP V5.3.0 ÌØÐÔ
ϸ²ì PHP V5.3.0 ÌØÐÔ
¼¶±ð£º Öм¶
Stephen B. Morris, CTO, Omey Communications
2009 Äê 12 ÔÂ 07 ÈÕ
Ëæ×ÅÁ÷ÐÐµÄ PHP ÓïÑԵIJ»¶ÏÑݱ䣬ºÜ¶àÐÂÌØÐÔʹËüÔÚÃæÏò¶ÔÏó·½ÃæÓÐÁ˽øÒ»²½µÄÔöÇ¿¡£±¾ÎÄͨ¹ýһЩ PHP V5.3 ʵÀýÑÝʾÑÓ³Ù¾²Ì¬°ó¶¨¡¢Ãû³Æ¿Õ¼äÖ§³Ö¡¢Àà·½·¨ÖØÔØÒÔ¼°±äÁ¿½âÎöºÍ heredoc Ö§³Ö¡£
ÐèÇó
³ýÁË¶Ô PHP ºÍ HTML Óлù±¾µÄÈÏʶÒÔÍ⣬ÎÞÐèÌ«¶àÆäËû·½ÃæµÄ֪ʶ±ã¿ÉÔĶÁ±¾ÎÄ¡£Ã¿µ±ÎÄÖÐÌáµ½ PHP V5.3 ʱ£¬Ö¸µÄÊÇ V5.3.0¡£
¿¼²ìµÄÌØÐÔ
±¾ÎÄÖ÷Òª¿¼²ì PHP V5.3 µÄÒÔÏÂÌØÐÔ£º
ÑÓ³Ù¾²Ì¬°ó¶¨
Ãû³Æ¿Õ¼ä
Àà·½·¨ÖØÔØ
±äÁ¿½âÎöºÍ heredoc
µ«ÊÇ£¬ÔÚ¼ÌÐøÖ®Ç°£¬ÐèÒªÉèÖà PHP V5.3¡£
»ØÒ³Ê×
ÉèÖÃ
PHP ¹ãΪÈËÖªµÄÒ»¸öÌØµã¾ÍÊÇÉèÖÃÆðÀ´ÓеãÂé·³¡£ÕâÒ²ÐíÊÇÒòΪ PHP Êǰ²×°ÔÚ Web ·þÎñÆ÷£¨ÀýÈç Apache£©Éϵ쬶øÇÒ³£³£ÐèÒªÁ¬½Óµ½ÍⲿÊý¾Ý¿â£¨ÀýÈç MySQL£©¡£¶øÇÒ£¬Ä³ÖÖÒâÒåÉÏ£¬PHP ½Å±¾ÊÇǶÈëÔÚ HTML ´úÂëÖеġ£»»¾ä»°Ëµ£¬PHP ÕâÖÖ¼¼Êõºá¿ç¶à¸ö¸´ÔÓµÄÁìÓò¡£ËùÒÔ£¬ÔÚ±àд PHP ½Å±¾´úÂë֮ǰ£¬±ØÐëÔ½¹ýºÜ¶àµÄÕϰ¡£ÎÒÏ£Íû¿ÉÒÔ¸ÄÉÆÕâÒ»ÏÖ×´£¬µ«ÊÇÓëÈí¼þ¼¼ÊõÓйصĺܶàÊÂÇéÈÔÈ»ºÜÀ§ÄÑ¡£
²»¹ý£¬¶ÔÓÚÄÇЩʹÓà Apple Macs µÄÐÒÔ˶ÁÕßÀ´Ëµ£¬ÉèÖùý³ÌÔÙ¼òµ¥²»¹ýÁË£º
»ñµÃ PHP ¶þ½øÖư²×°Îļþ£¨http://www.entropy.ch/software/macosx/php/£©¡£
ÔÚ System Preferences ÖÐ¹Ø±Õ Web Sharing¡£
ÕÒµ½ /etc/apache2/httpd.conf Îļþ¡£
ÔÚ httpd.conf ÎļþÖÐ×¢Ê͵ôÏÂÃæÕâÐУºLoadModule php5_module¡£
ÔËÐÐ PHP V5.3 °²×°Îļþ£¨Èç¹ûÄúÔ¸Ò⣬Ҳ¿ÉÒÔ¹¹½¨Ô´´úÂ룩¡£
ÔÚ System Preferences Öдò¿ª Web Sharing¡£
±¾ÎĵÄÄ¿µÄ²»Êǽö½ö½éÉÜÈçºÎ°²×°£¬ËùÒÔÈç¹ûÄúµÄƽ̨ÊÇ Microsoft® Windows® »ò Linux®£¬Çë²ÎÔÄһЩºÜ°ôµÄ PHP ²Î¿¼Êé¼®£¨¼ûÎÒÔÚ ²Î¿¼×ÊÁÏ ÖÐÍÆ¼öµÄÊé¼®£©¡£
ΪÁ˼ì²é PHP ÊÇ·ñÒѰ²×°ÒÔ¼°°æ±¾ÊÇ·ñºÏÊÊ£¬ÔÚ /Library/WebServer/Documents Îļþ¼ÐÖд´½¨Ò»¸öÃûΪ phpinfo1.php µÄÎļþ¡£Çåµ¥ 1 չʾÁËÕâ¸ö½Å±¾ÎļþµÄÄÚÈÝ¡£±¾ÎÄÖеÄËùÓнű¾¶¼ÔÚ ÏÂÔØ С½ÚÌṩµÄѹËõ£¨ZIP£©ÎļþÖУ¬ËùÒÔʵ¼ÊÉϲ»ÐèÒª´´½¨ÈκÎÎļþ¡£
Çåµ¥ 1. phpinfo1.php
<?php
phpinfo();
?>
½«¸Ã½Å±¾Îļþ·ÅÔÚ /Library/WebServer/Documents Îļþ¼ÐÖÐÖ®ºó£¬·ÃÎÊ http://localhost/phpinfo1.php¡£Ó¦¸Ã¿ÉÒÔ¿´µ½ÀàËÆÍ¼ 1 µÄ½çÃæ¡£ÕâÀï¿ÉÄÜÐèÒªÓÃÄúÖ÷»úµÄ IP µØÖ·Ìæ»» URL ÖÐµÄ “localhost”¡£
ͼ 1. PHP V5.3.0 °²×°³É¹¦
»ØÒ³Ê×
ÑÓ³Ù¾
Ïà¹ØÎĵµ£º
ÔÚphpÖмÆËãʱ¼ä²îÓÐʱºòÊǼþÂé·³µÄÊÂ!²»¹ýÖ»ÒªÄãÕÆÎÕÁËÈÕÆÚʱ¼äº¯ÊýµÄÓ÷¨ÄÇÕâЩҲ¾Í±äµÄ¼òµ¥ÁË:
Ò»¸ö¼òµ¥µÄÀý×Ó¾ÍÊǼÆËã½èÊéµÄÌìÊý,ÕâÐèÒªphp¸ù¾ÝÿÌìµÄÈÕÆÚ½øÐмÆËã,ÏÂÃæ¾ÍÀ´Ì¸Ì¸ÊµÏÖÕâÖÖÈÕÆÚ¼ÆËãµÄ¼¸ÖÖ·½·¨:
(1) Èç¹ûÓÐÊý¾Ý¿â¾ÍºÜÈÝÒ×ÁË!ÈôÊÇMSSQL¿ÉÒÔʹÓô¥·¢Æ÷!ÓÃרÃżÆËãÈÕÆÚ²îµÄº¯Êýdatediff()±ã¿É ......
1¡¢´´½¨ ºÍ ÐÞ¸Ä Êý×é
PHPÖÐʹÓÃarrayÀ´´´½¨Ò»¸öÊý×飺
array( key=>value , key=>value …… )
Àý×Ó£º
$arr = array (3,5,7,9,6);
&nb ......
µÚÎåÕ ´úÂëÖØÓÃÓ뺯Êý±àд
require()»òinclude()¿ÉÒÔ½«Ò»¸öÎļþÔØÈëµ½php½Å±¾ÖС£
ÕâÁ½¸öº¯Êý¼¸ºõµÈ¼Û£¬Î¨Ò»µÄÇø±ðÊǵ÷ÓÃʧ°Üºórequire()¸ø³öÒ»¸öÖÂÃü´íÎ󣬶øinclude()Ö»¸ø³öÒ»¸ö¾¯¸æ¡£
Èç¹ûWebÒ³Ãæ¾ßÓÐÒ»ÖµÄÍâ¹Û£¬¿ÉÒÔ½«ÏàͬµÄ²¿·Ö·ÖÀëµ½µ¥¶ÀµÄÒ³ÃæÖУ¬È»ºó¿ÉÒÔÔÚphpÖÐʹÓÃrequire()Óï¾ä½«Ä£°åÔªËØ¼ÓÈëµ½Ò³ÃæÖС£
......
×÷ÕߣºPh4nt0m Security Team
À´Ô´£ºhttp://www.ph4nt0m.org-a.googlepages.com/PSTZine_0x03_0x06.txt
==Ph4nt0m Security Team==
Issue 0x03, Phile #0x06 of 0x07
|=---------------------------------------- ......
JpgraphÏÂÔØÖ®ºó£¬°²×°·Ç³£¼òµ¥£¬½âѹµ½Ò»¸öÎļþ¼ÐÖУ¬ÀýÈ磺d:\Jpgraph£¬È»ºó´ò¿ªphpµÄ°²×°Ä¿Â¼£¬ÕÒµ½php.iniÎļþ£¬²¢ÐÞ¸ÄÆäÖеÄinlude_path²ÎÊý£¬²¢ÔÚÆäºó¼ÓÉÏJpgraphµÄ·¾¶£¬ÀýÈ磺inlude_path=".;d:\Jpgraph".
http://blog.csdn.net/zhuzhao/archive/2009/05/12/4174684.aspx ......