Course 2857
Course Introduction:Course introduction: 1. Cross-domain processing, token management, route interception; 2. Real interface debugging, API layer encapsulation; 3. Secondary encapsulation of Echarts and paging components; 4. Vue packaging optimization and answers to common problems.
Course 1795
Course Introduction:Apipost is an API R&D collaboration platform that integrates API design, API debugging, API documentation, and automated testing. It supports grpc, http, websocket, socketio, and socketjs type interface debugging, and supports privatized deployment. Before formally learning ApiPost, you must understand some related concepts, development models, and professional terminology. Apipost official website: https://www.apipost.cn
Course 5521
Course Introduction:(Consult WeChat: phpcn01) The comprehensive practical course aims to consolidate the learning results of the first two stages, achieve flexible application of front-end and PHP core knowledge points, complete your own projects through practical training, and provide guidance on online implementation. Comprehensive practical key practical courses include: social e-commerce system backend development, product management, payment/order management, customer management, distribution/coupon system design, the entire WeChat/Alipay payment process, Alibaba Cloud/Pagoda operation and maintenance, and project online operation. .....
Course 5172
Course Introduction:(Consult WeChat: phpcn01) Starting from scratch, you can solve conventional business logic, operate MySQL with PHP to add, delete, modify, and query, display dynamic website data, master the MVC framework, master the basics of the ThinkPHP6 framework, and learn and flexibly master all knowledge involved in PHP development. point.
Course 8713
Course Introduction:(Consult WeChat: phpcn01) The learning objectives of the front-end development part of the 22nd issue of PHP Chinese website: 1. HTML5/CSS3; 2. JavaScript/ES6; 3. Node basics; 4. Vue3 basics and advanced; 5. Mobile mall/ Website background homepage layout; 6. Automatic calculation of tabs/carousels/shopping carts...
2023-08-22 10:23:01 0 2 218
如何隐藏 header 中的 nginx 版本号,PHP 的版本号?
如题,如何隐藏 header 中的 nginx 版本号,PHP 的版本号? 为了防止某些恶意扫描攻击。
2017-05-16 17:25:55 0 2 472
nginx - 不同IP对一个php上千万次请求,是cc攻击吗?怎么防?
2017-05-16 17:16:21 0 2 264
php - 关于预防XSS攻击,用户输入时进行HTML编码?页面输出时进行HTML编码?哪个方案更好一点?
如题:关于预防XSS攻击,用户输入时进行HTML编码?页面输出时进行HTML编码?哪个方案更好一点?
2017-05-16 12:03:00 0 3 565
2017-04-11 09:03:50 0 3 259
Course Introduction:PHP安全实践防止跨站脚本攻击:1.输入验证和过滤(验证输入,过滤恶意字符,使用正则表达式检查格式);2.内容安全策略(限制加载来源);3.输出编码(编码HTML和JSON输出)。按照这些实践可有效防止XSS攻击,例如下面的示例:将用户输入使用htmlspecialchars()函数转义使其无法执行为脚本。
2024-06-08 comment 620
Course Introduction:常见PHP框架安全攻击包括XSS、SQL注入、CSRF、文件上传漏洞和RCE。防御措施有:验证输入;准备SQL查询;防止CSRF攻击;限制文件上传;修补框架漏洞。
2024-06-01 comment 917
Course Introduction:PHP框架安全指南:如何防止CSRF攻击?跨站点请求伪造(CSRF)攻击是一种网络攻击,其中攻击者诱骗用户在受害者的网络应用程序中执行非预期操作。CSRF如何工作?CSRF攻击利用了一个事实:大多数Web应用程序允许在同一个域名内不同页面之间发送请求。攻击者创建恶意页面,该页面向受害者的应用程序发送请求,触发未经授权的操作。如何防止CSRF攻击?
2024-05-23 comment 0 512
Course Introduction:防止PHP中的跨站脚本攻击:转义用户输入,使用htmlspecialchars()。使用参数化查询,避免SQL注入和XSS攻击。启用CSP,限制脚本和内容加载。使用CORS头,限制不同域Ajax请求。
2024-05-23 comment 250
Course Introduction:PHP中使用预处理语句可以有效防御SQL注入攻击。预处理语句通过允许在执行查询之前定义查询参数,从而阻止攻击者插入恶意字符串。它具有更高的安全性、更好的性能和易于使用的优点。
2024-05-06 comment 0 848