PHPÖÐÖ´ÐÐϵͳÍⲿÃüÁî
PHP×÷ΪһÖÖ·þÎñÆ÷¶ËµÄ½Å±¾ÓïÑÔ£¬Ïó±àд¼òµ¥£¬»òÕßÊǸ´ÔӵĶ¯Ì¬ÍøÒ³ÕâÑùµÄÈÎÎñ£¬ËüÍêÈ«Äܹ»Ê¤ÈΡ£µ«ÊÂÇé²»×ÜÊÇÈç´Ë£¬ÓÐʱΪÁËʵÏÖij¸ö¹¦ÄÜ£¬±ØÐë½èÖúÓÚ
²Ù×÷ϵͳµÄÍⲿ³ÌÐò£¨»òÕß³ÆÖ®ÎªÃüÁ£¬ÕâÑù¿ÉÒÔ×öµ½Ê°빦±¶¡£
¡¡¡¡ÄÇô£¬ÊÇ·ñ¿ÉÒÔÔÚPHP½Å±¾Öе÷ÓÃÍⲿÃüÁîÄØ£¿Èç¹ûÄÜ£¬ÈçºÎÈ¥×öÄØ£¿
ÓÐЩʲô·½ÃæµÄ¹ËÂÇÄØ£¿ÏàÐÅÄã¿´Á˱¾Îĺ󣬿϶¨Äܹ»»Ø´ðÕâЩÎÊÌâÁË¡£
ÊÇ·ñ¿ÉÒÔ£¿
¡¡¡¡´ð°¸Êǿ϶¨µÄ¡£PHPºÍÆäËüµÄ³ÌÐòÉè
¼ÆÓïÑÔÒ»Ñù£¬ÍêÈ«¿ÉÒÔÔÚ³ÌÐòÄÚµ÷ÓÃÍⲿÃüÁ²¢ÇÒÊǺܼòµ¥µÄ£ºÖ»ÒªÓÃÒ»¸ö»ò¼¸¸öº¯Êý¼´¿É¡£
ǰÌáÌõ¼þ
¡¡¡¡ÓÉÓÚPHP»ù±¾ÊÇ
ÓÃÓÚWEB³ÌÐò¿ª·¢µÄ£¬ËùÒÔ°²È«ÐÔ³ÉÁËÈËÃÇ¿¼ÂǵÄÒ»¸öÖØÒª·½Ãæ¡£ÓÚÊÇPHPµÄÉè¼ÆÕßÃǸøPHP¼ÓÁËÒ»¸öÃÅ£º°²È«Ä£Ê½¡£Èç¹ûÔËÐÐÔÚ°²È«Ä£Ê½Ï£¬ÄÇôPHP½Å
±¾Öн«Êܵ½ÈçÏÂËĸö·½ÃæµÄÏÞÖÆ£º
Ö´ÐÐÍⲿÃüÁî
ÔÚ´ò¿ªÎļþʱÓÐЩÏÞÖÆ
Á¬½ÓMySQLÊý¾Ý¿â
»ùÓÚHTTPµÄÈÏÖ¤
¡¡
¡¡ÔÚ°²È«Ä£Ê½Ï£¬Ö»ÓÐÔÚÌØ¶¨Ä¿Â¼ÖеÄÍⲿ³ÌÐò²Å¿ÉÒÔ±»Ö´ÐУ¬¶ÔÆäËü³ÌÐòµÄµ÷Óý«±»¾Ü¾ø¡£Õâ¸öĿ¼¿ÉÒÔÔÚphp.iniÎļþÖÐÓÃ
safe_mode_exec_dirÖ¸Á»òÔÚ±àÒëPHPÊǼÓÉÏ--with-exec-dirÑ¡ÏîÀ´Ö¸¶¨£¬Ä¬ÈÏÊÇ/usr/local/php
/bin¡£
Èç¹ûÄãµ÷ÓÃÒ»¸öÓ¦¸Ã¿ÉÒÔÊä³ö½á¹ûµÄÍⲿÃüÁÒâ˼ÊÇPHP½Å±¾Ã»ÓдíÎ󣩣¬µÃµ½µÄÈ´ÊÇһƬ¿Õ°×£¬ÄÇôºÜ¿ÉÄÜÄãµÄÍø¹ÜÒѾ°Ñ
PHPÔËÐÐÔÚ°²È«Ä£Ê½ÏÂÁË¡£
ÈçºÎ×ö£¿
ÔÚPHPÖе÷ÓÃÍⲿÃüÁ¿ÉÒÔÓÃÈçÏÂÈýÖÖ·½·¨À´ÊµÏÖ£º
1£©
ÓÃPHPÌṩµÄרÃź¯Êý
PHPÌṩ¹²ÁË3¸öרÃŵÄÖ´ÐÐÍⲿÃüÁîµÄº¯Êý£ºsystem()£¬exec()£¬passthru()¡£
system()
Ô
ÐÍ£ºstring system (string command [, int return_var])
system()º¯ÊýºÜÆäËü
ÓïÑÔÖеIJ¶à£¬ËüÖ´Ðиø¶¨µÄÃüÁÊä³öºÍ·µ»Ø½á¹û¡£µÚ¶þ¸ö²ÎÊýÊÇ¿ÉÑ¡µÄ£¬ÓÃÀ´µÃµ½ÃüÁîÖ´ÐкóµÄ״̬Âë¡£
Àý×Ó£º
<?php
system
(
"/usr/local/bin/webalizer/webalizer"
);
?>
exec()
ÔÐÍ£ºstring exec (string command [,
string array [, int return_var]])
exec()º¯ÊýÓësystem()ÀàËÆ£¬Ò²Ö´Ðиø¶¨µÄÃüÁµ«²»
Êä³ö½á¹û£¬¶øÊÇ·µ»Ø½á¹ûµÄ×îºóÒ»ÐС£ËäÈ»ËüÖ»·µ»ØÃüÁî½á¹ûµÄ×îºóÒ»ÐУ¬µ«Óõڶþ¸ö²ÎÊýarray¿ÉÒԵõ½ÍêÕûµÄ½á¹û£¬·½·¨Êǰѽá¹ûÖðÐÐ×·¼Óµ½arrayµÄ
½áβ´¦¡£ËùÒÔÈç¹ûarray²»Êǿյģ¬ÔÚµ÷ÓÃ֮ǰ×îºÃÓÃunset()×îËüÇåµô¡£Ö»ÓÐÖ¸¶¨Á˵ڶþ¸ö²ÎÊýʱ£¬²Å¿ÉÒÔÓõÚÈý¸ö²ÎÊý£¬ÓÃÀ´È¡µÃÃüÁîÖ´ÐеÄ״̬
Âë¡£
Àý×Ó£º
<?php
exec
(
"/bin/ls -l"
);
e
Ïà¹ØÎĵµ£º
Ò»¡¢zend studioµÄÅäÖÃ
1.µ½zendµÄ°²×°Ä¿Â¼ÏÂɾ³ýÁ½¸öÎļþ(¿ÉÓпÉÎÞ.ÖÁÉÙÎÒ²»É¾³ýÒ²²»Òƶ¯¿ÉÒÔ)
ÎҵݲװĿ¼£ºD:\Program Files\Zend\Zend Studio - 7.0.2\plugins\
ɾ³ýµÄÎļþÊÇ£ºcom.zend.php.debug.core_7.0.0.v20090607-1658.jar
&nbs ......
Õâ¸ö©¶´ÑϸñÉÏ˵²¢²»ÊÇ Nginx ºÍ PHP ±¾ÉíµÄ©¶´Ôì³ÉµÄ£¬¶øÊÇÓÉÅäÖÃÔì³ÉµÄ¡£ÔÚÎÒ֮ǰдµÄÐí¶àÅäÖÃÖУ¬¶¼ÆÕ±é´æÔÚÕâ¸ö©¶´¡£
¼òÒ×¼ì²â·½·¨£º
´ò¿ª Nginx + PHP ·þÎñÆ÷ÉϵÄÈÎÒâÒ»ÕÅͼƬ£¬È磺
http://blog.lrenwang.com/test.png
Èç¹ûÔÚͼƬÁ´½Óºó¼ÓÒ»´® /xxx.php £¨xxxΪÈÎÒâ×Ö·û£©ºó£¬È磺
http://blog.lrenwang.com/ ......
ÔÚwindows ÏÂÅäÖÃPHPʹÓÃORACLEÊý¾Ý¿âÒªµã
ÔÚwindowÏ£¬¾³£ÓÃapache + PHP À´×öÓ¦ÓÃÆ½Ì¨£¬µ«ÊÇÈç¹ûʹÓÃoracle×öºǫ́Êý¾Ý¿â£¬µ«ÓÖûÓа²×°ÓÐoracle¿Í»§¶Ë£¬ÏÂÃæµÄÅäÖÿÉÒԲο¼
1¡¢ÔÚûÓа²×°oracleµÄ»úÆ÷ÉÏ£¬PHPÎÞ·¨¼ÓÔØphp_oci8.dllÄ£¿é£¬ÔÒòÊÇphp_oci8.dllÒÀÀµµÄÏà¹Ø×é¼þûÓÐÕÒµ½¡£
ÄãÕýÈ·ÉèÖÃÁË ......
PHP£¬JavaºÍ.NETµÄ¹ýÈ¥£¬ÏÖÔÚºÍδÀ´
±¾ÎĶÔWeb±à³ÌÓïÑÔ½øÐÐÁËÒ»·ÌÖÂÛ£¬ÌÖÂ۵ĶÔÏóÖ÷ÒªÊÇPHP£¬JavaºÍ.NETƽ̨ÉϵÄVB.NETºÍC#¡£ÎÄÕ¶ÔËÄÖÖÓïÑÔÔÚWeb¿ª·¢ÉϵÄÌØµã½øÐÐÁ˼òÂÔµÄÃèÊö£¬²¢Ö÷ÒªÔÚÐÔÄÜ·½Ãæ½øÐÐÁ˱Ƚϡ£
¡¾51CTO¾«Ñ¡ÒëÎÄ¡¿PHP£¬JavaºÍ.NETÒѾ³ÉΪÁËδÀ´ÎåÄêÄÚ³ÌÐòÔ±±ØÐë¾ß±¸µÄ¼¼ÄÜ£¬¶øÕâÈýÖÖÓïÑÔ£¨»òÕß¿ÉÒÔ³ÆÖ®Î ......
½ñÌìÏëʹÓÃÕâÒ»¾äphpÀ´ÅжÏÒ»¸öÎļþÊÇ·ñ´æÔÚ£º echo is_file('/var/downloads/donkey/incoming/[µ±µØÇòֹͣת¶¯].The.Day.The.Earth.Stood.Still.DVDRip.XviD-DMT.avi')?"true":"false";
echo is_file('/var/downloads/donkey/incoming/[µ±µØÇòֹͣת¶¯].The.Day.The.Earth.Stood.Still.DVDRip.XviD-DMT.avi')?"t ......