PHP\u6700\u57fa\u7840\u6559\u7a0b — \u53c2\u6570\u4f20\u9012<\/p>\n
\u53c2\u6570\u4f20\u9012\u53ef\u4ee5\u7528\u5f88\u591a\u65b9\u6cd5\uff0c\u6bd4\u5982SESSION,cookie,\u8868\u5355\u4f20\u9012,URL\u4f20\u9012
\u5728\u8fd9\u91cd\u70b9\u4ecb\u7ecd\u4e00\u4e0b\u8868\u5355\u4f20\u9012\u548cURL\u4f20\u9012\u5427\uff0cSESSION\u548cCOOKIE\u5230\u6700\u540e\u518d\u8bf4<\/p>\n
1\uff0cURL\u4f20\u9012\uff1a
\u8fd9\u4e2a\u5f88\u5bb9\u6613\uff0c\u76f4\u63a5\u770b\u5730\u5740\u680fhttp:\/\/www.phzzy.org\/index.php?aaa=111
\u5176\u4e2dindex.php\u662f\u6587\u4ef6\u540d\uff0c?\u540e\u9762\u7684aaa\u662f\u53c2\u6570\u540d\uff0c111\u662f\u53c2\u6570aaa\u7684\u503c
\u8fd9\u6837\u5c31\u80fd\u628aaaa\u7684\u503c\u4f20\u7ed9index.php\u8fd9\u4e2a\u9875
\u5982\u679c\u60f3\u4f20\u591a\u4e2a\u53c2\u6570\u5462\uff1f\u65b9\u6cd5\u662f\u53c2\u6570\u53ea\u95f4\u52a0&
\u6bd4\u5982\uff1a
http:\/\/www.phzzy.org\/index.php?aaa=111&bbb=222&ccc=333
\u8fd9\u6837\u5c31\u4f20\u4e86\u4e09\u4e2a\u53c2\u6570
\u5176\u4e2daaa=111,bbb=222,ccc=333
\u5f88\u5bb9\u6613\u7684\u54c8:)
\u5982\u679c\u60f3\u5728index.php\u4e0a\u83b7\u53d6\u6b64\u53c2\u6570\u7684\u503c\uff0c\u5219\u7528$_GET['aaa']\uff0c\u5219\u80fd\u5f97\u5230aaa\u7684\u503c
\u6bd4\u5982\uff1a
echo $_GET['aaa'];
\u5219\u8f93\u51fa111<\/p>\n
2\uff0c\u8868\u5355\u4f20\u9012\uff1a
\u8868\u5355\u4f20\u9012\u662f\u901a\u8fc7<form><input><textarea>\u7b49\u4f20\u9012\u7684
\u6bd4\u5982\uff1a
<form action="index.php" method="post">
<input type="text" name="aaa">
<input type="text" name="bbb">
<textarea name="ccc"><\/textarea>
<input type="submit">
<\/form>
\u719f\u6089HTML\u7684\u670b\u53cb\u5bb9\u6613\u77e5\u9053\u8fd9\u6837\u4f1a\u5efa\u7acb\u4e00\u4e2a\u8868\u5355\uff0c\u5176\u4e2d\u5305\u62ec\u4e24\u4e2ainput\u8f93\u5165\u6846\uff0c\u4e00\u4e2atextarea\u8f93\u5165\u6846\u548c\u4e00\u4e2a\u63d0\u4ea4\u6309\u94ae\uff0c\u5982\u679c\u6211\u4eec\u5728\u8f93\u5165\u6846\u4e2d\u8f93\u5165\u4e1c\u897f\u7136\u540e\u70b9\u63d0\u4ea4\u7684\u8bdd\uff0c\u5c31\u4f1a\u628a\u8868\u5355\u7684\u5185\u5bb9\u63d0\u4ea4\u7ed9index.php\uff0c\u65b9\u6cd5\u662fpost\uff0c\u7136\u540e\u5982\u679c\u6211\u4eec\u8981\u5728index.php\u8fd9\u4e2a\u6587\u4ef6\u4e2d\u53d6\u5f97\u63d0\u4ea4\u8fc7\u6765\u7684\u8f93\u5165\u503c\uff0c\u5219\u7528$_POST['xx']
\u6bd4\u5982\u6211\u4eec\u5728\u8868\u5355aaa\u4e2d\u8f93\u5165\u4e86111\uff0cbbb\u4e2d\u8f93\u5165\u4e86222\uff0cccc\u4e2d\u8f93\u5165\u4e86333
\u5219
echo $_POST['aaa'];\/\/\u8f93\u51fa111
echo $_POST['bbb'];\/\/\u8f93\u51fa222
echo $_POST['ccc'];\/\/\u8f93\u51fa333<\/p>\n
\u8fd8\u6709\u66f4\u52a0\u7b80\u5355\u7684\u65b9\u6cd5\uff0c\u4f7f\u7528\u4e8eURL\u4f20\u9012\u548c\u8868\u5355\u4f20\u9012\uff0c\u5c31\u662f\u6539php.ini\u91cc\u9762\u7684\u914d\u7f6e
\u627e\u5230php.ini\u4e2d\u7684\u8fd9\u884c
register_globals
\u628a\u540e\u9762\u7684\u503c\u8bbe\u7f6e\u6210ON (\u9ed8\u8ba4\u4e3aOFF)\uff0c\u8fd9\u6837\u7684\u8bdd\u5c31\u80fd\u76f4\u63a5\u4f7f\u7528\u4f20\u8fc7\u6765\u7684\u53d8\u91cf\u4e86
\u6bd4\u5982index.php?aaa=111
\u5219\u5728index.php\u4e2d\u4f1a\u81ea\u52a8\u5efa\u7acb\u4e00\u4e2a\u53d8\u91cf$aaa\uff0c\u503c\u4e3a111\uff0c\u4e0d\u8fc7\u4e0d\u63a8\u8350\u8fd9\u6837\u505a
\ud83d\ude42<\/p>\n
\u6700\u540e\u4e00\u4e2a\u4e1c\u897f\u5c31\u662f\u5982\u679c\u8981\u628a\u53c2\u6570\u8fde\u7eed\u4f20\u9012\u5462\uff1f\u5475\u5475\uff0c\u5148\u4f20\u5230\u7b2c\u4e00\u9875\uff0c\u7136\u540e\u83b7\u53d6\u7136\u540e\u518d\u7528\u4e0a\u9762\u7684\u529e\u6cd5\u4f20\u7ed9\u4e0b\u4e00\u9875:)<\/p>\n","protected":false},"excerpt":{"rendered":"
PHP\u6700\u57fa\u7840\u6559\u7a0b — \u53c2\u6570\u4f20\u9012 \u53c2\u6570\u4f20\u9012\u53ef\u4ee5\u7528\u5f88\u591a\u65b9\u6cd5\uff0c\u6bd4\u5982SESSION,cookie,\u8868\u5355\u4f20\u9012 […]<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-178","post","type-post","status-publish","format-standard","hentry","category-4","category-4-id","post-seq-1","post-parity-odd","meta-position-corners","fix"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=178"}],"version-history":[{"count":0,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/178\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}