This article mainly introduces the SQL injection and escape code. In fact, you can refer to the dedecms Empire phpcms code during usage. I believe your code is safer for SQL injection:
Under normal circumstances:
Delete. php? Id = 3;$ SQL = 'delete
: This article mainly introduces addslashes and other methods for clearing spaces, which are insecure. For more information about PHP tutorials, see. The space clearing method is insecure, in part because there are many spaces in the characters. for
What's a Local File transfer sion?A local file transfer Sion (usually called "LFI") is a webhacking technique that allow simply to include files from a local location. that means that we can include a file that is outside of the web directory (if we
PHP Core Configuration DetailedRegister_globals (global variable registration switch)This option is on, directly back to the user Get,post and other methods submitted by the parameters to register as a global variable and initialize the value
SQL injection attacks are the most common means by which hackers attack websites. If your site does not use strict user input validation, it is often vulnerable to SQL injection attacks. SQL injection attacks are typically implemented by submitting
Except for the last. htacess file, do just move the site, the program has not moved.
Just found out a bunch of problems today.
; Magic quotes for incoming Get/post/cookie data.
MAGIC_QUOTES_GPC = Off
; Magic quotes for runtime-generated data,
Output statement: echo (), print () instance: echo & amp; 39; hello & amp; 39;, & amp; 39; world & amp; 39; note:, ** variable: must start with $, case sensitive, the first character must be
Output statement:Echo (), print ().
Instance: echo 'hello',
The way to clear whitespace is unsafe, in part because there are a lot of spaces in the characters, such as "The problem with addslashes is that hackers can use 0xbf27 instead of single quotes, and addslashes just modifies 0xbf27 to 0xbf5c27 to
How to understand
By default, there is a "Magic quotes" switch in PHP. If this switch is enabled, $ _ GET, $ _ GET, and $ COOKIE transferred from outside will be escaped by PHP.For example:
Http: // localhost/test. PHP? Test = 1'
Then it is
Cheap VM really cannot believe it! In addition to the last. htacess file, I only moved the website and the program was not moved.
Today I found a bunch of problems.
; Magic quotes for incoming GET/POST/Cookie data.
Magic_quotes_gpc = Off
;
Linux PHP compilation and installation parameters detailed./configure--prefix=/usr/local/php--with-config-file-path=/usr/local/php/etc--with-mysql=/usr/local/mysql--
The method of clearing spaces is unsafe, in part because there are so many spaces in the character, for example, "The problem with addslashes is that hackers can use 0xbf27 instead of single quotes, and addslashes only modifies 0xbf27 to 0xbf5c27 as
Although this forum does not have a PHP forum
But as a good language,
I still decided to turn him around.
PHP.ini Chinese explanation
[PHP]
; PHP is still an evolving tool, and its functionality is constantly being pruned
; and PHP.ini's setting
This file controls many aspects of PHP's perspective. In order for PHP to read this file, it must be named
; ´php.ini´. PHP will locate the file in turn: current working directory; environment variable PHPRC
; The specified path, the path specified
SQL Injection VulnerabilityPrinciple: As the developer writes the operation database code, the external controllable parameter is directly stitched into the SQL statement, and is placed directly into the database engine without any filtering.Attack
SQL injection attacks are the most common means by which hackers attack websites. If your site does not use strict user input validation, it is often vulnerable to SQL injection attacks. SQL injection attacks are typically implemented by submitting
For php experts, please take a look at the compilation-related parameters. Thank you-Linux Enterprise Application-Linux server application information. For more information, see below. For php experts, please take a look at the compilation-related
"① time zone Problem"PHP Use Date functionSuch as:Strtotime (' 2014-01-05 ');d ate (' y-m-d h:i ', Time ());There will be an inexplicable increase of 8 hours or minus eight hours after the resultSo what?This is a time zone problem and you can modify
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.