{"id":179,"date":"2006-05-23T03:34:22","date_gmt":"2006-05-23T03:34:22","guid":{"rendered":"http:\/\/www.icocean.com\/blog\/?p=179"},"modified":"1970-01-01T07:00:00","modified_gmt":"1970-01-01T07:00:00","slug":"%5Bphp%5D%E5%85%B3%E4%BA%8E%E7%BD%91%E7%AB%99%E4%B8%AD%E8%BF%9B%E8%A1%8C%E6%90%9C%E7%B4%A2%E7%9A%84%E8%AE%BE%E8%AE%A1","status":"publish","type":"post","link":"https:\/\/www.icocean.com\/blog\/?p=179","title":{"rendered":"[PHP]\u5173\u4e8e\u7f51\u7ad9\u4e2d\u8fdb\u884c\u641c\u7d22\u7684\u8bbe\u8ba1"},"content":{"rendered":"

PHP\u5173\u4e8e\u7f51\u7ad9\u4e2d\u8fdb\u884c\u641c\u7d22\u7684\u8bbe\u8ba1 <\/p>\n

HTML\u9875\u9762\u4e2d\u53ef\u4ee5\u8fd9\u6837\u8bbe\u8ba1\uff0c\u53ea\u8981\u628aform\u7684method\u8bbe\u7f6e\u4e3aGET\u5c31\u597d\u4e86\uff0c\u8fd9\u6837\uff0c\u5b83\u5c31\u4f1a\u81ea\u52a8\u7684\u628a\u641c\u7d22\u5b57\u7b26\u4e32\u52a0\u7684URL\u7684\u540e\u9762\u3002<\/p>\n

<form name="formSearch" action="search.php" method="GET">
<input type="text" value="" name="search">
<input type="submit" value="\u641c\u7d22">
<\/form><\/p>\n

\u4e0b\u9762\u662f\u5728search.php\u9875\u9762\u4e2d\u8fdb\u884c\u641c\u7d22\u524d\u8981\u8fdb\u884c\u7684\u5904\u7406
\u4e3a\u4e86\u9632\u6b62SQL\u653b\u51fb\uff0c\u5bf9\u5176\u8fdb\u884c\u8fc7\u6ee4\uff0c\u5e76\u4e14\uff0c\u56e0\u4e3aURL\u4e2d\u5e26\u7684\u662f\u7279\u6b8a\u683c\u5f0f\u7684\uff0c\u6240\u4ee5\u8981\u7528urldecode\u51fd\u6570\u6765\u5bf9\u5b83\u8fdb\u884c\u89e3\u7801\b\b\b\b<\/p>\n

if (isset($_GET['search']) && strlen($_GET['search']) > 0 )
{
$search = trim(urldecode($_GET['search']));
$search = str_replace("update", "", strtolower($search));
$search = str_replace("insert", "", strtolower($search));
$search = str_replace("create", "", strtolower($search));
$search = str_replace("drop", "", strtolower($search));
$search = str_replace("delete", "", strtolower($search));<\/p>\n

if (strlen($search) < 1)
{
die("Hacking attempt");
}
\/\/ \u5728\u8fd9\u91cc\u53ef\u4ee5\u8fdb\u884c\u5176\u5b83\u5904\u7406\u5de5\u4f5c\u4e86
}<\/p>\n","protected":false},"excerpt":{"rendered":"

PHP\u5173\u4e8e\u7f51\u7ad9\u4e2d\u8fdb\u884c\u641c\u7d22\u7684\u8bbe\u8ba1 HTML\u9875\u9762\u4e2d\u53ef\u4ee5\u8fd9\u6837\u8bbe\u8ba1\uff0c\u53ea\u8981\u628aform\u7684method\u8bbe\u7f6e\u4e3aGET\u5c31\u597d\u4e86\uff0c\u8fd9 […]<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-179","post","type-post","status-publish","format-standard","hentry","category-4","category-4-id","post-seq-1","post-parity-odd","meta-position-corners","fix"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=179"}],"version-history":[{"count":0,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/179\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}