Home > Backend Development > PHP Tutorial > 关于php漏洞

关于php漏洞

WBOY
Release: 2016-06-23 14:33:11
Original
838 people have browsed it

对于字符型注入是php比较麻烦的问题。因为safe_mode为On的时候会过滤'为\'

众所周知,\的编码是%5c

如果前面加个%d5的话,就和%5c构成一个汉字:诚

这样就可以很好的进入查询系统:

%d5%5c

注入形式为:

target.php?name=aa

测试:

target.php?name=aa%d5'

Related labels:
source:php.cn
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Popular Tutorials
More>
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template