Code audits are primarily vulnerable interfaces and input and output locations
1.1//gloabals Variable//key Variable$globals$_server$_get$_post$_files$_cookie$_session$_request$_envregeister_ Globals=off gpc[$_get,$_post,$_cookie]1.2//Vulnerability Functions extract () Extr_overwriteparse_str () Import_ Request_variables () Http_raw_post_datain ()/limit ()/order by/group bystripslashes () iconv ()/mb_convert_encoding () Magic_quotes_gpc=oneval () Preg_replace () assert () Call_user_func () Call_user_func_array () create_function () session_ Destroy () rand () vs Mt_rand () unset (). /1.3//check input data from user command Parameterconfig filedata indexenvironment variablenetwork serviceregedit key Val Uetemp file//tools xssdetect ratproxy http proxy 127.0.0.1:8080codesonaryascarips
The above describes the PHP language Code Vulnerability Audit Skills note sharing, including aspects of the content, I hope the PHP tutorial interested in a friend helpful.