首页
课程
路径
文章
PHP培训
精品课
下载

技术文章  >  后端开发 > php教程

求分析个php代码

原创
2016-06-06 20:29:32 867浏览 

listOptions($actionTaskId); // We will actually store it for use in a second...
            break;

          case "stop": // Stop a specified running Task ID
            $sqlmap->stopScan($actionTaskId);
            break;

          case "kill": // Forcefully Kill a specified running Task ID
            $sqlmap->killScan($actionTaskId);
            break;

          case "del": // Delete a specified running Task ID
            $sqlmap->deleteTaskID($actionTaskId);
            break;

          default: // Do Nothing if nothing is specified...
            break;
        }
      }
    }
  }
?>



  
    SQLMAP Web GUI - Admin Panel
    
    
    
    
    
    
    
  

 
 

  
    


SQLMAP Web GUI - Admin Panel";
  if(isset($_SESSION['myAdminID'])) { 
    $taskList = $sqlmap->adminListTasks(trim($_SESSION['myAdminID']));
    if(!$taskList) {
?>

    

    

      

        

        

          
[WARNING] '' - Appears to be an Invalid Admin ID!


          

             
            

            
          


        

        

      

    



    

    

      

        

        

          

            

              Admin ID: 

              Total Number of Known Tasks: 

            

            



            

              

                

                

                  
';
                    echo '';
                    echo '
';
                  } else {
                  ?>
                    checkScanStatus($t);
                          $taskConfig = $sqlmap->listOptions($t);
                          echo "";
                            echo "";
                            if(sizeof($taskConfig) > 0) {
                              $targetHost = parse_url($taskConfig['options']['url'], PHP_URL_HOST);
                              echo "";
                            } else {
                              echo "";
                            }
                            if(isset($status['status'])) {
                              echo "";
                            } else {
                              echo "";
                            }
                            echo "";
                            if($status['status'] == 'running') {
                              echo "";
                              echo "";
                            } else {
                              echo "";
                              echo "";
                            }
                            echo "";
                          echo "";
                        }
                      ?>
                      

                      
                        

                          TaskID
                          Target
                          Status
                          Options
                        

                      
                      
                      
";
                            echo htmlentities($t, ENT_QUOTES, 'UTF-8');
                            echo "" . htmlentities($targetHost, ENT_QUOTES, 'UTF-8') . " - " . htmlentities($status['status'], ENT_QUOTES, 'UTF-8') . " -  Conf  Stop  Kill  -  -  Del 

                    

                  
                

                

              

            


          

        

        

      

    


    

    

      

        

        

          
[WARNING] NO Admin ID Set!


          

             
            

            
          


        

        

      

    



    



    

        Logout

        Want to learn more about SQLMAP, Visit the Project Page!

        SQLMAP Web Operator Copyright © 2015, Coded By: HR, All rights reserved.

这是后台登录首页(index.php)的代码，帐号密码在config.php中写死了，是admin，admin。现在登录后台后，显示[WARNING] NO Admin ID Set!，然后然我输入一串密文token，token密文貌似是

  $salt = "!SQL!";                            // Salt for form token hash generation
  $token = sha1(mt_rand(1, 1000000) . $salt); // Generate CSRF Token Hash
  $_SESSION['token'] = $token;                // Set CSRF Token for Form SubmitVerification

是1-1000000加SALT的sha1加密，然后我在

          
[WARNING] NO Admin ID Set!

看到了输出token的语句，在前台查看源代码后，把密文输入，但是还是不行。求解，怎么才能过去？谢谢！！

回复内容：

listOptions($actionTaskId); // We will actually store it for use in a second...
            break;

          case "stop": // Stop a specified running Task ID
            $sqlmap->stopScan($actionTaskId);
            break;

          case "kill": // Forcefully Kill a specified running Task ID
            $sqlmap->killScan($actionTaskId);
            break;

          case "del": // Delete a specified running Task ID
            $sqlmap->deleteTaskID($actionTaskId);
            break;

          default: // Do Nothing if nothing is specified...
            break;
        }
      }
    }
  }
?>



  
    SQLMAP Web GUI - Admin Panel
    
    
    
    
    
    
    
  

 
 

  
    


SQLMAP Web GUI - Admin Panel";
  if(isset($_SESSION['myAdminID'])) { 
    $taskList = $sqlmap->adminListTasks(trim($_SESSION['myAdminID']));
    if(!$taskList) {
?>

    

    

      

        

        

          
[WARNING] '' - Appears to be an Invalid Admin ID!


          
             
            

            
          

        

        

      

    



    

    

      

        

        

          

            

              Admin ID: 

              Total Number of Known Tasks: 

            

            



            

              

                

                

                  
';
                    echo '';
                    echo '
';
                  } else {
                  ?>
                    checkScanStatus($t);
                          $taskConfig = $sqlmap->listOptions($t);
                          echo "";
                            echo "";
                            if(sizeof($taskConfig) > 0) {
                              $targetHost = parse_url($taskConfig['options']['url'], PHP_URL_HOST);
                              echo "";
                            } else {
                              echo "";
                            }
                            if(isset($status['status'])) {
                              echo "";
                            } else {
                              echo "";
                            }
                            echo "";
                            if($status['status'] == 'running') {
                              echo "";
                              echo "";
                            } else {
                              echo "";
                              echo "";
                            }
                            echo "";
                          echo "";
                        }
                      ?>
                      

                      
                        

                          TaskID
                          Target
                          Status
                          Options
                        

                      
                      
                      
";
                            echo htmlentities($t, ENT_QUOTES, 'UTF-8');
                            echo "" . htmlentities($targetHost, ENT_QUOTES, 'UTF-8') . " - " . htmlentities($status['status'], ENT_QUOTES, 'UTF-8') . " -  Conf  Stop  Kill  -  -  Del 

                    

                  
                

                

              

            


          

        

        

      

    


    

    

      

        

        

          
[WARNING] NO Admin ID Set!


          

             
            

            
          


        

        

      

    



    



    

        Logout

        Want to learn more about SQLMAP, Visit the Project Page!

        SQLMAP Web Operator Copyright © 2015, Coded By: HR, All rights reserved.

这是后台登录首页(index.php)的代码，帐号密码在config.php中写死了，是admin，admin。现在登录后台后，显示[WARNING] NO Admin ID Set!，然后然我输入一串密文token，token密文貌似是

  $salt = "!SQL!";                            // Salt for form token hash generation
  $token = sha1(mt_rand(1, 1000000) . $salt); // Generate CSRF Token Hash
  $_SESSION['token'] = $token;                // Set CSRF Token for Form SubmitVerification

是1-1000000加SALT的sha1加密，然后我在

          
[WARNING] NO Admin ID Set!

看到了输出token的语句，在前台查看源代码后，把密文输入，但是还是不行。求解，怎么才能过去？谢谢！！

你通过POST传递 myAdminID，但问题是你自己输入的myAdminID是应该怎么产生的？

那个token是防止CSRF的，不是用来产生myAdminID的，至于myAdminID应该怎么产生，你应该看看这段代码：

$sqlmap->adminListTasks(trim($_SESSION['myAdminID']));
phpPHP课程HTML视频教程CSS视频JS视频教程Vue视频教程
声明：本文内容由网友自发贡献，版权归原作者所有，本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容，请联系admin@php.cn核实处理。
上一条：新浪微博分享成功是否有回调接口 下一条：mysql 查询当前日期与字段日期 相差的天数

相关文章

查看更多
  • 热门课程
打开APP，随时随地在线学习！