<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/stnye</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; stnye]]></copyright><item><title><![CDATA[【CSRF】拦截referer的应对方法]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/22501485</link><guid>https://blog.youkuaiyun.com/stnye/article/details/22501485</guid><author>stnye</author><pubDate>Sat, 29 Mar 2014 16:45:32 +0800</pubDate><description><![CDATA[很多处理CSRF的方案都是对referer做检查，但是对于空referer很多情况是不做拦截的，比如提供给app的接口就不会拦截空referer请求。
绕过这种防御的办法有两种：
1.function json(o){alert(o.nick);}">2.https-->http
以上两种请求方式都不会带referer，这样就能实现jsonhijacking等攻击了。


防御这两种攻]]></description><category></category></item><item><title><![CDATA[Curl设置毫秒超时]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/22181231</link><guid>https://blog.youkuaiyun.com/stnye/article/details/22181231</guid><author>stnye</author><pubDate>Wed, 26 Mar 2014 15:28:46 +0800</pubDate><description><![CDATA[首先需要升级curl组件，php版本
curl_setopt（$ch, CURLOPT_TIMEOUT_MS,500)

只有这一行是不行的，会出现低于1000即不通
增加配置：
curl_setopt（$ch, CURLOPT_NOSIGNAL,1)

即可。]]></description><category></category></item><item><title><![CDATA[curl并行使用误区]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/10584473</link><guid>https://blog.youkuaiyun.com/stnye/article/details/10584473</guid><author>stnye</author><pubDate>Fri, 30 Aug 2013 11:13:01 +0800</pubDate><description><![CDATA[转自：http://www.cnblogs.com/niniwzw/archive/2010/01/30/1659589.html

说的都是只兼容unix 服务器的多进程，下面来讲讲在window 和 unix 都兼容的多进程(这里是泛指，下面的curl实际上是通过IO复用实现的)。

    通过扩展实现多线程的典型例子是CURL，CURL 支持多线程的抓取网页的功能。

这部分过]]></description><category></category></item><item><title><![CDATA[绕开js字符过滤]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/10139119</link><guid>https://blog.youkuaiyun.com/stnye/article/details/10139119</guid><author>stnye</author><pubDate>Wed, 21 Aug 2013 11:40:15 +0800</pubDate><description><![CDATA[转载自http://www.wooyun.org/bugs/wooyun-2013-027762





有问题的地址是：http://qzone-music.qq.com/fcg-bin/fcg_music_fav_getinfo.fcg?dirinfo=1&dirid=201&uin=QQ号码&p=0.887586027616635&inCharset=GB2312&outCha]]></description><category></category></item><item><title><![CDATA[魔术常量__CLASS__的一个误区]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/9469261</link><guid>https://blog.youkuaiyun.com/stnye/article/details/9469261</guid><author>stnye</author><pubDate>Thu, 25 Jul 2013 15:08:26 +0800</pubDate><description><![CDATA[先看代码：
abstract class A
{

	public static function model($classname = __CLASS__)
	{
		return new $classname;
	}
}


class B extends A
{
	
}

B::model();
这里会报一个fatal error：Cannot instantiate abstract]]></description><category></category></item><item><title><![CDATA[json_decode奇怪的失败？]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/9380155</link><guid>https://blog.youkuaiyun.com/stnye/article/details/9380155</guid><author>stnye</author><pubDate>Fri, 19 Jul 2013 14:32:50 +0800</pubDate><description><![CDATA[除去那些不规范的json串以外还是解析不出来？
检查是否开头多了个看不见的bom字符或表现为多出一个空行]]></description><category></category></item><item><title><![CDATA[练级之路 TODOLIST]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/9340967</link><guid>https://blog.youkuaiyun.com/stnye/article/details/9340967</guid><author>stnye</author><pubDate>Tue, 16 Jul 2013 11:26:09 +0800</pubDate><description><![CDATA[进阶加深

    1、 C语言和操作系统调用

重新学C语言，理解指针和内存模型，用C语言实现一下各种经典的算法和数据结构。推荐《计算机程序设计艺术》、《算法导论》和《编程珠玑》。
学习(麻省理工免费课程)计算机科学和编程导论
学习(麻省理工免费课程)C语言内存管理
学习Unix/Linux系统调用(Unix高级环境编程)，，了解系统层面的东西。
用这些系统知识操作一下文件系统，]]></description><category></category></item><item><title><![CDATA[awk统计速度]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/8939686</link><guid>https://blog.youkuaiyun.com/stnye/article/details/8939686</guid><author>stnye</author><pubDate>Fri, 17 May 2013 14:29:53 +0800</pubDate><description><![CDATA[awk -F ":" 'BEGIN{minC=9999;maxC=0;mc=0}{sum+=$2;c++;if($2>maxC)maxC=$2;if($20.01)mc++;}END{printf("total:%s time:%s avg:%s max:%s min:%s overgap:%s\n", sum,c,sum/c,maxC,minC,mc)}' filename
其中;if($2>]]></description><category></category></item><item><title><![CDATA[TIPI读书笔记（二）]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/8879332</link><guid>https://blog.youkuaiyun.com/stnye/article/details/8879332</guid><author>stnye</author><pubDate>Fri, 03 May 2013 12:11:01 +0800</pubDate><description><![CDATA[php.ini的读取

CLI模式下通过-c参数指定的ini⽂件的优先级是最⾼的， 其次是PHPRC指定的⽂件，第三是在搜索路径中查找php-%sapi-modulename%.ini⽂件（如CLI模式下应该是查找php-cli.ini⽂件）， 最后才是搜索路径中查找php.ini⽂件。
php执行周期]]></description><category></category></item><item><title><![CDATA[xss quiz]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/8845033</link><guid>https://blog.youkuaiyun.com/stnye/article/details/8845033</guid><author>stnye</author><pubDate>Wed, 24 Apr 2013 15:33:48 +0800</pubDate><description><![CDATA[stage 12
输入过滤了以下字符s/[\x00-\x20\\"\']//g;
使用字符``可以在ie下制造空格实现绕过
``onmouseover=alert(document.domain);





stage 15
document.write写内容时对\x3c和\x3e会解析为
\\x3cscript\\x3ealert(document.domain);\\x]]></description><category></category></item><item><title><![CDATA[TIPI读书笔记(一）]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/8781872</link><guid>https://blog.youkuaiyun.com/stnye/article/details/8781872</guid><author>stnye</author><pubDate>Wed, 10 Apr 2013 19:42:00 +0800</pubDate><description><![CDATA[run-tests.php阅读
读这种代码还是很涨姿势的。
__DIR__ is available from 5.3.0
FILE_BINARY is available from 5.2.7
getcwd()chdir() ：取得/变更当前工作目录

粗略了解了makefile的编写规则]]></description><category></category></item><item><title><![CDATA[关于脚本执行时“^M”问题]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/8474206</link><guid>https://blog.youkuaiyun.com/stnye/article/details/8474206</guid><author>stnye</author><pubDate>Sun, 06 Jan 2013 18:24:28 +0800</pubDate><description><![CDATA[文件格式有问题，从windows上传至linux时，文件格式不符，所以出错
解决办法：
vim 下 :set ff=unix]]></description><category></category></item><item><title><![CDATA[本地mc启动]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/8106196</link><guid>https://blog.youkuaiyun.com/stnye/article/details/8106196</guid><author>stnye</author><pubDate>Wed, 24 Oct 2012 11:50:42 +0800</pubDate><description><![CDATA[/usr/local/bin/memcached -u daemon -d -m 1024 -l 127.0.0.1 -p 11211]]></description><category></category></item><item><title><![CDATA[一句话]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/7870367</link><guid>https://blog.youkuaiyun.com/stnye/article/details/7870367</guid><author>stnye</author><pubDate>Wed, 15 Aug 2012 18:29:48 +0800</pubDate><description><![CDATA[asp,php,aspx一句话集合
http://www.expsec.com
From:ExpSec
落泪红尘整理
 
推荐还是把一句话加进图片里面去。
 
普通的php一句话：
 
普通的asp一句话：
 
aspx突破一流的：

dim da
set fso=server.createobject(“scripting.filesystemobject”)
pa]]></description><category></category></item><item><title><![CDATA[bash脚本“No such file or directory”问题]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/7834941</link><guid>https://blog.youkuaiyun.com/stnye/article/details/7834941</guid><author>stnye</author><pubDate>Mon, 06 Aug 2012 12:54:28 +0800</pubDate><description><![CDATA[文件格式造成
解决如下：
 :set ff?  查看该文件的格式，fileformat=dos

则输入:set ff=unix强制改成unix格式的]]></description><category></category></item><item><title><![CDATA[syslog-ng安装]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/7827234</link><guid>https://blog.youkuaiyun.com/stnye/article/details/7827234</guid><author>stnye</author><pubDate>Fri, 03 Aug 2012 15:01:48 +0800</pubDate><description><![CDATA[安装版本为3.2.4
使用rpm包安装，安装时start报错
error while loading shared libraries: libsyslog-ng.so.0: cannot open shared object file: No such file or directory
原因是系统默认的lib路径为/usr/local/lib
而libsyslog-ng.so在/usr]]></description><category></category></item><item><title><![CDATA[lnmp配置]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/7680267</link><guid>https://blog.youkuaiyun.com/stnye/article/details/7680267</guid><author>stnye</author><pubDate>Wed, 20 Jun 2012 16:49:23 +0800</pubDate><description><![CDATA[关闭php-fpm:
usr/local/etc/php-fpm.conf中写了pid存放位置如/var/run/php-fpm.pid kill之


启动

php-fpm -c php.ini -y php-fpm.conf]]></description><category></category></item><item><title><![CDATA[mysql_escape_string不可靠]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/7649031</link><guid>https://blog.youkuaiyun.com/stnye/article/details/7649031</guid><author>stnye</author><pubDate>Sat, 09 Jun 2012 22:49:43 +0800</pubDate><description><![CDATA[$id = mysql_escape_string($_GET['a']);
$link = mysql_connect('localhost', 'root', '') or die("connect failed");
$sql = "SELECT id,2 FROM test.test WHERE id = $id";
$rt = mysql_query($sql);url:index.ph]]></description><category></category></item><item><title><![CDATA[spam collect]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/7580708</link><guid>https://blog.youkuaiyun.com/stnye/article/details/7580708</guid><author>stnye</author><pubDate>Fri, 18 May 2012 16:19:19 +0800</pubDate><description><![CDATA[zcat 18/xxx.*/*-xxxxx.log.0.gz | grep "xxxx/xxxx.php" | awk -F " " '{print $8}' | sort | uniq -c | sort -nr > ~/spam/18

awk 'NR==FNR{a[$1","$2]=$0;next}{if($1","$2 in a){print a[$1","$2]>"comm";b[$]]></description><category></category></item><item><title><![CDATA[顶部title实现]]></title><link>https://blog.youkuaiyun.com/stnye/article/details/7103716</link><guid>https://blog.youkuaiyun.com/stnye/article/details/7103716</guid><author>stnye</author><pubDate>Mon, 26 Dec 2011 18:03:37 +0800</pubDate><description><![CDATA[方法一：

requestWindowFeature(Window.FEATURE_CUSTOM_TITLE);
setContentView(R.layout.main);
getWindow().setFeatureInt(Window.FEATURE_CUSTOM_TITLE,R.layout.title);
方法二：]]></description><category></category></item></channel></rss>