How to escalate privileges in phpmyadmin through diary

The following tutorial column fromphpmyadminwill introduce to you how to upgrade phpmyadmin through diary. I hope it will be helpful to friends in need!

##phpmyadmin Weak passwords are often seen. Today I will introduce how to provide phpmyadmin with weak passwords. right.

First of all, phpMyAdmin is a MySQL database management tool based on PHP and structured in Web-Base mode on the website host, allowing administrators to use the Web interface to manage MySQL databases. During the installation process, the default path is WWW/phpmyadmin

Obtain relevant information:

As you can see, this is the integrated environment of phpstudy, and the general installation path is
disk/ File package/phpstudyThe next step is to check the path of the website. I will introduce two types below:
The first one: through the probe:

The above information can be It turns out that our absolute path is C:/phpstudy/phpstudy/WWW. Generally this is the root directory of the website, and the probe file is in subdirectory 12 under the root directory/This is also the path of phpmyadmin
The second type: Enter phpmysql and get the mysql directory through the sql command, and then infer the website path
The command is select @@basedir;

It can be concluded that our mysql installation path is C:/ phpstudy/phpstudy/MySQL/, based on this we can infer that the root path of our website is C:/phpstudy/phpstudy/WWW

The next step is the expansion of privilege escalationMySQL global The value of the variable (general_log, general_log file).
general log refers to the log saving status. There are two values (ON/OFF). ON means open and OFF means closed. general log file refers to the path where the log is saved.
You can use sql command
set global general_log = "ON"; #Turn on the log saving status
SET global general_log_file='c:/phpStudy/phpstudy/WWW/infos.php' #Modify the saving of the log Location

The next step is to write a sentence:

Successful connection:

Some people may ask why it is not one sentence after writing, but mixed with other statements

What we uploaded is PHP pony, in the connection During the process, read from the beginning, because the previous ones do not have the characteristics of php files.

The above is the detailed content of How to escalate privileges in phpmyadmin through diary. For more information, please follow other related articles on the PHP Chinese website!