phpµ÷ÓÃÍⲿÃüÁî
PHP×÷ΪһÖÖ·þÎñÆ÷¶ËµÄ½Å±¾ÓïÑÔ£¬Ïó±àд¼òµ¥£¬»òÕßÊǸ´ÔӵĶ¯Ì¬ÍøÒ³ÕâÑùµÄÈÎÎñ£¬ËüÍêÈ«Äܹ»Ê¤ÈΡ£µ«ÊÂÇé²»×ÜÊÇÈç´Ë£¬ÓÐʱΪÁËʵÏÖij¸ö¹¦ÄÜ£¬±ØÐë½èÖúÓÚ²Ù×÷ϵͳµÄÍⲿ³ÌÐò£¨»òÕß³ÆÖ®ÎªÃüÁ£¬ÕâÑù¿ÉÒÔ×öµ½Ê°빦±¶¡£
ÄÇô£¬ÊÇ·ñ¿ÉÒÔÔÚPHP½Å±¾Öе÷ÓÃÍⲿÃüÁîÄØ£¿Èç¹ûÄÜ£¬ÈçºÎÈ¥×öÄØ£¿ÓÐЩʲô·½ÃæµÄ¹ËÂÇÄØ£¿ÏàÐÅÄã¿´Á˱¾Îĺ󣬿϶¨Äܹ»»Ø´ðÕâЩÎÊÌâÁË¡£
ÊÇ·ñ¿ÉÒÔ£¿
´ð°¸Êǿ϶¨µÄ¡£PHPºÍÆäËüµÄ³ÌÐòÉè¼ÆÓïÑÔÒ»Ñù£¬ÍêÈ«¿ÉÒÔÔÚ³ÌÐòÄÚµ÷ÓÃÍⲿÃüÁ²¢ÇÒÊǺܼòµ¥µÄ£ºÖ»ÒªÓÃÒ»¸ö»ò¼¸¸öº¯Êý¼´¿É¡£
ǰÌáÌõ¼þ
ÓÉÓÚPHP»ù±¾ÊÇÓÃÓÚWEB³ÌÐò¿ª·¢µÄ£¬ËùÒÔ°²È«ÐÔ³ÉÁËÈËÃÇ¿¼ÂǵÄÒ»¸öÖØÒª·½Ãæ¡£ÓÚÊÇPHPµÄÉè¼ÆÕßÃǸøPHP¼ÓÁËÒ»¸öÃÅ£º°²È«Ä£Ê½¡£Èç¹ûÔËÐÐÔÚ°²È«Ä£Ê½Ï£¬ÄÇôPHP½Å±¾Öн«Êܵ½ÈçÏÂËĸö·½ÃæµÄÏÞÖÆ£º
Ö´ÐÐÍⲿÃüÁî
ÔÚ´ò¿ªÎļþʱÓÐЩÏÞÖÆ
Á¬½ÓMySQLÊý¾Ý¿â
»ùÓÚHTTPµÄÈÏÖ¤
ÔÚ°²È«Ä£Ê½Ï£¬Ö»ÓÐÔÚÌØ¶¨Ä¿Â¼ÖеÄÍⲿ³ÌÐò²Å¿ÉÒÔ±»Ö´ÐУ¬¶ÔÆäËü³ÌÐòµÄµ÷Óý«±»¾Ü¾ø¡£Õâ¸öĿ¼¿ÉÒÔÔÚphp.iniÎļþÖÐÓÃsafe_mode_exec_dirÖ¸Á»òÔÚ±àÒëPHPÊǼÓÉÏ--with-exec-dirÑ¡ÏîÀ´Ö¸¶¨£¬Ä¬ÈÏÊÇ/usr/local/php/bin¡£
Èç¹ûÄãµ÷ÓÃÒ»¸öÓ¦¸Ã¿ÉÒÔÊä³ö½á¹ûµÄÍⲿÃüÁÒâ˼ÊÇPHP½Å±¾Ã»ÓдíÎ󣩣¬µÃµ½µÄÈ´ÊÇһƬ¿Õ°×£¬ÄÇôºÜ¿ÉÄÜÄãµÄÍø¹ÜÒѾ°ÑPHPÔËÐÐÔÚ°²È«Ä£Ê½ÏÂÁË¡£
ÈçºÎ×ö£¿
ÔÚPHPÖе÷ÓÃÍⲿÃüÁ¿ÉÒÔÓÃÈçÏÂÈýÖÖ·½·¨À´ÊµÏÖ£º
1£© ÓÃPHPÌṩµÄרÃź¯Êý
PHPÌṩ¹²ÁË3¸öרÃŵÄÖ´ÐÐÍⲿÃüÁîµÄº¯Êý£ºsystem()£¬exec()£¬passthru()¡£
system()
ÔÐÍ£ºstring system (string command [, int return_var])
system()º¯ÊýºÜÆäËüÓïÑÔÖеIJ¶à£¬ËüÖ´Ðиø¶¨µÄÃüÁÊä³öºÍ·µ»Ø½á¹û¡£µÚ¶þ¸ö²ÎÊýÊÇ¿ÉÑ¡µÄ£¬ÓÃÀ´µÃµ½ÃüÁîÖ´ÐкóµÄ״̬Âë¡£
Àý×Ó£º
<?
system("/usr/local/bin/webalizer/webalizer");
?>
exec()
ÔÐÍ£ºstring exec (string command [, string array [, int return_var]])
exec()º¯ÊýÓësystem()ÀàËÆ£¬Ò²Ö´Ðиø¶¨µÄÃüÁµ«²»Êä³ö½á¹û£¬¶øÊÇ·µ»Ø½á¹ûµÄ×îºóÒ»ÐС£ËäÈ»ËüÖ»·µ»ØÃüÁî½á¹ûµÄ×îºóÒ»ÐУ¬µ«Óõڶþ¸ö²ÎÊýarray¿ÉÒԵõ½ÍêÕûµÄ½á¹û£¬·½·¨Êǰѽá¹ûÖðÐÐ×·¼Óµ½arrayµÄ½áβ´¦¡£ËùÒÔÈç¹ûarray²»Êǿյģ¬ÔÚµ÷ÓÃ֮ǰ×îºÃÓÃunset()×îËüÇåµô¡£Ö»ÓÐÖ¸¶¨Á˵ڶþ¸ö²ÎÊýʱ£¬²Å¿ÉÒÔÓõÚÈý¸ö²ÎÊý£¬ÓÃÀ´È¡µÃÃüÁîÖ´ÐеÄ״̬Âë¡£
Àý×Ó£º
<?
exec("/bin/ls -l");
exec("/bin/ls -l", $res);
#$resÊÇÒ»¸öÊý¾Ý£¬Ã¿¸öÔªËØ´ú±í
Ïà¹ØÎĵµ£º
FCKeditor ÊÇÒ»¸öÊ®·ÖÇ¿´óµÄÍøÒ³Îı¾±à¼Æ÷£¬ËüÖ§³Ö¶àÖֽű¾±à³ÌÓïÑÔ(°üÀ¨ PHP)ºÍÖ§³Ö¶à¹úÓïÑÔ¡£
FCKeditor ½ØÖÁ 2008Äê4ÔÂ6ÈÕ£¬Æä×îа汾ÊÇ 2.6RC£¬RC ¾ÍÊÇ Release Candidate£¬ÐÞ¶©ºóµÄºòÑ¡°æ±¾£¬ºÜ¿ÉÄÜ×÷Ϊ¸Ã°æ±¾µÄÎȶ¨°æÔÚδÀ´·¢²¼¡£Ä¿Ç°µÄ×îеÄÎȶ¨°æ(Latest Stable)ÊÇ 2.5.1¡£ÎÒÃÇ¿ÉÒÔµ ......
ÔÚÍøÉÏÕÒÁ˺ܶàIIS+PHPµÄÅäÖõķ½·¨£¬ÊÔ¹ýÖ®ºóºÜ¶à¶¼²»ÄܴﵽЧ¹û¡£ÓÚÊÇ×ܽáÁ˴󲿷ֵÄÎÄÕºó¾ÍµÃ³öÁËÕâÑùµÄ·½·¨£º£¨±¾´Î²Ù×÷ϵͳÒÔWin2000ΪÀý£¬Èç¹ûÄãÒª¸ÄΪÆäËüϵͳ¾Í°Ñϵͳ¸ùĿ¼±äһϾÍOkÁË£©
Ò»¡¢ÏÂÔØ±ØÐëµÄ³ÌÐò£º
(1) Ïȵ½PHPµÄ¹Ù·½ÍøÕ¾ÏÂÔØÒ»¸öPHP£¨±¾ÎľÍÒÔPHP 4.4.2ΪÀý£©¡£ ......
require() Óë require_once()
ͨ³£·ÅÔÚ PHP ³ÌÐòµÄ×îÇ°Ãæ£¬PHP ³ÌÐòÔÚÖ´ÐÐǰ£¬¾Í»áÏȶÁÈë require
ËùÖ¸¶¨ÒýÈëµÄÎļþ£¬Èç¹û³öÏÖ´íÎóÊÇÖÂÃüµÄ¡£
nclude() Óë include_once()
&n ......
checkcode.php
====================
<?php
session_start();
$funcs = array('imagecreatetruecolor','imagecolorallocate','imagefill','imageline','imagedestroy','imagecolorallocatealpha','imageellipse','imagepng');
if(!function_exists('ob_gzhandler'))
ob_clean();
//crea ......
Ò»¸ö¹«Ë¾¼òµ¥µÄÃæÊÔÌ⣺
1. ¼ò´ðÌâ
(1)һЩÏà¹ØLINUX·½ÃæµÄÖ¸Áî²Ù×÷eg: mkdir ´´½¨Ä¿Â¼ touch ´´½¨Îļþ¼ÐÒÔ¼°ÐÞ¸ÄȨÏÞchmodÖ®ÀàµÈµÈ
(2)¼òÊö²»Í¬°æ±¾µÄPHPÓÐÊ²Ã´Çø±ð,ÊÔ¾ÙÀý¼òÊö.
(3),¼òÊö½Ó¿Ú¼¼ÊõµÄºÃ´¦,ÊÔ¾ÙÀý¼òÊö.
(4)ÈçºÎʹÓÃÏÂÃæµÄÀà,²¢½âÊÍÏÂÃæÊ²Ã´Òâ˼?
class test{
function ......