phpÎļþÉÏ´«Àà
<?php
/**
* PHP100.com - ¸öÈ˸оõ·Ç³£¼òµ¥£¬Ö»ÒªÓеãPHP»ù´¡µÎÈ˶¼Ó¦¸ÃÄÜ¿´¶®~~
* Apache2 + PHP5.0
* Version:1.0
* ͬʱ¸ÐлPHP100ËùÓеÄÐÖµÜÃÇ
* ————————————————————————————————— Example —
* test.php @ ´¦Àí±íµ¥ÎļþÃû
* <?php
*
* include("upload.php"); # ¼ÓÈëÀàÎļþ
* $f_upload = new upload_other; # ´´½¨¶ÔÏó
* $f_upload->set_file_type($_FILES['src']['type']); # »ñµÃÎļþÀàÐÍ
* $f_upload->set_file_name($_FILES['src']['name']); # »ñµÃÎļþÃû³Æ
* $f_upload->set_file_size($_FILES['src']['size']); # »ñµÃÎļþ³ß´ç
* $f_upload->set_upfile($_FILES['src']['tmp_name']); # ·þÎñ¶Ë´¢´æµÄÁÙʱÎļþÃû
* $f_upload->set_size(100); # ÉèÖÃ×î´óÉÏ´«KBÊý
* $f_upload->set_base_directory("uploadImages"); # Îļþ´æ´¢¸ùĿ¼Ãû³Æ
* $f_upload->set_url("up.php"); # ÎļþÉÏ´«³É¹¦ºóÌø×ªµÄÎļþ
* $f_upload->save(); # ±£´æÎļþ
*
* ?>
* —————————————————————————————————— End —
*
* żûÓÐ
Ïà¹ØÎĵµ£º
¿´µ½Í¬Ñ§ÃÇÓв»ÉÙÔÚÓÃphp¿ª·¢ÏîÄ¿µÄ£¬»òÐíÏÂÃæµÄ×ÊÁ϶Դó¼ÒÓÐÓðɣ¬ÓÃÀ´Ñ§Ï°Ò»ÏÂÒ²ºÃ¡£
ÊÕ¼¯µÄ×ÊÁÏÏà¹ØµØÖ·£º
cubi demo site£ºhttp://dev.openbiz.cn/cubi/user/login
openBiz app cubi£ºhttp://docs.google.com/View?id=df5ktjv9_64f9fd88gf
openbiz architecture overview:
http: ......
ת×Ô http://wiki.kuaizhanbao.com/2009/1210/245.html
basename — ·µ»ØÂ·¾¶ÖеÄÎļþÃû²¿·Ö
chgrp — ¸Ä±äÎļþËùÊôµÄ×é
chmod — ¸Ä±äÎļþģʽ
chown — ¸Ä±äÎļþµÄËùÓÐÕß
clearstatcache — Çå³ýÎļþ״̬»º´æ
copy — ¿½±´Îļþ
delete — ²Î¼û unlink() »ò unset()
di ......
×òÌìÎÒÃÇʵÏÖÁËÒ»¸ö¼òµ¥µÄËÑË÷¹¦ÄÜ£¬½ñÌìÎÒÏëÁËһϣ¬Æäʵ»¹ÓпÉÒԸĽøµÄµØÖ·£¬ÈçÖ±½ÓÓÃIndex.php´úÌæSearch.php¡£
ÐÞ¸ÄIndex.phpÎļþ£¬ÐÞ¸ÄÒ»ÏÂËÑË÷±íµ¥
<!---ËÑË÷¿ò--->
<!--ÕâÀïµÄËùÓÐÖµÇ°Ãæ¼Óǰ׺“S_”ÒÔÇø·Ö-->
<form id="form1" name="form1" method="get" action="Index.php">
&n ......
¶ÔÓڽű¾°²È«Õâ¸ö»°ÌâºÃÏñÓÀԶûÍêûÁË£¬Èç¹ûÄã¾³£µ½¹úÍâµÄ¸÷ÖÖ¸÷ÑùµÄbugtraqÉÏ£¬Äã»á·¢ÏÖÓÐÒ»°ëÒÔÉ϶¼ºÍ½Å±¾Ïà¹Ø£¬ÖîÈçSQL
injection£¬XSS£¬Path Disclosure£¬Remote commands
executionÕâÑùµÄ×ÖÑ۱ȱȽÔÊÇ£¬ÎÒÃÇ¿´ÁËÖ®ºóµÄÓÃ;ÄѵÀ½ö½öÊÇ×¥È⼦?¶ÔÓÚÎÒÃÇÏë×öweb°²È«µÄÈËÀ´Ëµ£¬×îºÃ¾ÍÊÇÄÃÀ´Ñ§Ï°£¬¿ÉÊÇÍòÎï×¥¸ùÔ´£¬ÎÒà ......
$_GET ±äÁ¿ÓÃÓÚÊÕ¼¯À´×Ô method="get" µÄ±íµ¥ÖеÄÖµ¡£
$_GET ±äÁ¿
$_GET ±äÁ¿ÊÇÒ»¸öÊý×飬ÄÚÈÝÊÇÓÉ HTTP GET ·½·¨·¢Ë͵ıäÁ¿Ãû³ÆºÍÖµ¡£
$_GET ±äÁ¿ÓÃÓÚÊÕ¼¯À´×Ô method="get" µÄ±íµ¥ÖеÄÖµ¡£´Ó´øÓÐ GET ·½·¨µÄ±íµ¥·¢Ë͵ÄÐÅÏ¢£¬¶ÔÈκÎÈ˶¼ÊǿɼûµÄ£¨»áÏÔʾÔÚä¯ÀÀÆ÷µÄµØÖ·À¸£©£¬²¢ÇÒ¶Ô·¢Ë͵ÄÐÅÏ¢Á¿Ò²ÓÐÏÞÖÆ£¨×î¶à 100 ¸ö ......