Month of PHP Security Summary
it is 21th of May. The Month of PHP Security
(http://www.php-security.org) is still running and we have reached a
vulnerability count of 40 vulnerabilities, which is nearly as much as we
disclosed during the whole Month of PHP Bugs in 2007. However there are
11 more days until the end of May and therefore there are still plenty
of more vulnerabilities to come. Escpecially the amount of SQL injection
vulnerabilites in PHP applications will increase, because it is called
SQL injection marathon for a reason. And we also have several articles
and submissions left.
There have been some changes to the website that should make it easier
to read and we also added the possiblity to comment on bugs/entries/news
and articles.
For those that don't already know you can follow the Month of PHP
Security on Twitter, too. Just follow @mops_2010
Here is the summary of what happened during the last 10 days.
Related Events
--------------
Returning into the PHP Interpreter – Remote Exploitation of Memory
Corruptions in PHP is not over, yet.
http://php-security.org/2010/05/21/related-event-returning-into-the-php-interpreter-remote-exploitation-of-memory-corruptions-in-php-is-not-over-yet/
PHP Security Course – Advanced PHP Auditing at Source and Bytecode level
http://php-security.org/2010/05/19/related-event-php-security-course-advanced-php-auditing-at-source-and-bytecode-level/
Articles
--------
MOPS Submission 07: Our Dynamic PHP – Obvious and not so obvious PHP
code injection and evaluation
http://php-security.org/2010/05/20/mops-submission-07-our-dynamic-php/
MOPS Submission 06: Variable Initialization in PHP
http://php-security.org/2010/05/17/mops-submission-06-variable-initialization-in-php/
Article: Decoding a User Space Encoded PHP Script
http://php-security.org/2010/05/13/article-decoding-a-user-space-encoded-php-script/
MOPS Submission 05 – The Minerva PHP Fuzzer
http://php-security.org/2010/05/11/mops-submission-05-the-mi
相关文档：
前言：
多语言网站开发，重点的还是在解决语言之间的问题。
那如何解决这个问题呢?大概就分三步走：
1.页面多语言
2.数据库多语言
3.用户访问语言统一
1.页面多语言
需要考虑的问题：
A.用户登陆时候，自动识别字符，调用不同的语言包?
B.用户切换不同语言时候，调用不同的语 ......
之前PHP实现多语言国际化，大部分都会采用把语言直接提出来作为数组来调用，例如比较有名phpMyadmin，discuz等知名开源系统，不过，这里介绍如何通过gettext，即用资源文件来实现。典型的CMS案例-wordpress也是通过它实现的语言国际化，下面来说下php中如何来利用配置文件实现国际化的。
首先介绍下.MO文件，在PHP中是利用 ......
<?php
header("Content-type:text/html;charset=gb2312"); //看你用的是什么编码，要保持一致。
$files="config.php"; //要写入的配置文件。
if(!is_writable($files)){ //判断是否有可写的权限，linux操作系统要注意这一点，windows不必注意。
echo "<font color=red>文件不可写</font>";
......
源码目录：/usr/local/src/
应用目录：/usr/local/app/
一、MYSQL安装。
1.下载MSYQL源码：
http://www.mysql.com/downloads/mysql/
最近版本是 mysql-5.1.47.tar.gz
2.上传到服务器目录/usr/local/src/
cd /usr/local/src/
tar zxvf mysql-5.1.47.tar.gz
cd mysql-5.1.47
./configure --prefi ......
<?php
class Model_Data_FocusData{
....
public function getData(){...}
}
class Model_Data_IndexData{
....
public function getData(){...}
}
?>
有这么几个类，希望能够自动的根据参数来调用不同的类处理数据。
看调用模块：
<?php
function getData($act){
$class = "Mode ......
