[网鼎杯 2020 朱雀组]phpweb 待续

最新推荐文章于 2024-11-26 14:48:49 发布

原创

最新推荐文章于 2024-11-26 14:48:49 发布 · 665 阅读

0 ·

CC 4.0 BY-SA版权

本文探讨了PHP中如何通过禁用危险函数来增强代码安全性，展示了如何使用黑名单方式防止潜在的攻击，并通过具体代码示例说明了如何实现这一功能。

抓包看参数联想到函数读index.php代码

func=file_get_contents&p=index.php

<?php
$disable_fun = array("exec","shell_exec","system","passthru","proc_open","show_source","phpinfo","popen","dl","eval","proc_terminate","touch","escapeshellcmd","escapeshellarg","assert","substr_replace","call_user_func_array","call_user_func","array_filter", "array_walk", "array_map","registregister_shutdown_function","register_tick_function","filter_var", "filter_var_array", "uasort", "uksort", "array_reduce","array_walk", "array_walk_recursive","pcntl_exec","fopen","fwrite","file_put_contents");
function gettime($func, $p) {
$result = call_user_func($func, $p);
$a= gettype($result);
if ($a == "string") {
return $result;
&n