Community Learn Tools Library Leisure
search
English
Home > Backend Development > PHP Tutorial > Application analysis of allow_url_include in php

Application analysis of allow_url_include in php

WBOY
Release： 2016-07-25 09:05:41
Original
992 people have browsed it

  3. // Insecure Include

  4. // The following Include statement will
  5. // include and execute everything POSTed
  6. // to the server

  7. include "php://input";

  8. ?>

Copy code

Example 2: Use data: to Include arbitrary code

  3. // Insecure Include

  4. // The following Include statement will
  5. // include and execute the base64 encoded
  6. // payload. Here this is just phpinfo()< ;/p>

  7. include "data:;base64,PD9waHAgcGhwaW5mbygpOz8+";

  8. ?>

Copy the code

Put these into the operation and you will find that neither url_allow_fopen is Nor is url_allor_include guaranteed. Just because filters rarely filter vectors. If you want to completely solve this URL include vulnerabilities method, you need to apply the Suhosin extension.



Related labels：
php中allow_url_include的应用分析
source：php.cn
Previous article：A small example of php array deduplication Next article：php-redis Chinese document three
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
Group MySQL results by ID for looping over I have a table with flight data in mysql. I'm writing a php code that will group and displ...
From 2024-04-06 17:27:56
0
1
406
Use locally installed libraries in website pages Is it possible to use libraries (.dll, .ocx) written for Windows operating systems and reg...
From 2024-04-05 00:15:49
0
1
3563
How to access "type" property in "students" array in API response using Flutter, Laravel and PHP? "data":{"id":9,"name":"tala","role":&quo...
From 2024-04-04 19:25:13
0
1
288
Is there a way to differentiate resource requesters via PHP or .htaccess Is there a way to differentiate between the browser loading the page that requested the re...
From 2024-04-04 08:37:32
0
1
404
Javascript event delegate with unknown selector and children I have a dynamic selector (linkTrigger) which is supposed to capture clicks on an element....
From 2024-04-03 23:39:19
0
1
420
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template