PHP script against web Scanners

Most Web scanners (including the upload and Management backend scanners) determine whether a page exists by judging the HTTP 200 return, these scans start to scan vulnerabilities. Since internal logic cannot be strictly controlled, the bottleneck of input/output is implemented. ArticleWhen an incorrect password or permission fails to be entered, we will return an HTTP 400 error message to mislead the scanner to stop scanning (including which manual intruders)
Take php as an example: CopyCodeThe Code is as follows: <? PHP
Ob_start ();
If ('Password '! = $ _ Get ['Password'])
Header ("HTTP/1.1 404 Not Found ");
?>
<! Doctype HTML public "-// W3C // dtd html 4.0 transitional // en">
<HTML>
<Head>
<Title> sample </title>
</Head>
<Body>
</Body>
</Html>
<? PHP ob_end_flush ();?>