CURL is a tool that uses URL syntax to transfer files and data, and supports many protocols, such as HTTP, FTP, Telnet, and so on. Best of all, PHP also supports the CURL library. Using the PHP Curl Library, you can easily and effectively grab pages.
1. The basic principles of PHP submission data filtering1) When committing variables into the database, we must use Addslashes () to filter, like our injection problem, a addslashes () will be done. In fact, when it comes to variable values, the
This article discusses the installation of PHP5 under WINDOWS2003, please note
Download PHP5, download address: http://www.php.net/downloads.php, after the site opened as shown in the following figure, there are several versions of the choice,
[PHP]
; PHP is still an evolving tool, and its functionality is constantly being pruned
; and PHP.ini's setting changes can reflect quite a change,
; Before using the new PHP version, it would be helpful to look at the php.ini.
;;;;;;;;;;;;;;;;;;;
;
One, CGI mode installation security
Second, the Apache module to install security
When PHP is installed as an Apache module, it inherits the privileges of the Apache user (usually "nobody"). This has some impact on security and authentication. For
Error_log: Send out an error message.
Error_reporting: Configure the level of error message return.
GETENV: Get the environment variable of the system
Get_cfg_var: Gets the configuration option value for PHP.
Get_current_user: Gets the name of the
Set_magic_quotes_runtime (0);You can modify the settings of the Magic_quotes_runtime Boolean in php.iniWhen your data has some\"'Such characters are useful when they are written to the database and are not filtered out, and are preceded by
int get_magic_quotes_gpc (void)
This function obtains the PHP environment set Variable MAGIC_QUOTES_GPC (GPC, Get/post/cookie) value. Return 0 To turn off this feature; return 1 indicates this feature is turned on. When MAGIC_QUOTES_GPC is turned on,
1. The MAGIC_QUOTES_GPC option in the PHP configuration file php.ini is not turned on and is set to off2. Developers do not check and escape data typesBut in fact, the 2nd is the most important. I think that it is the most basic quality of a web
What is performance analysis?performance analysis is a measure of the relative performance of your application at the code level. The events that the profiling will capture include: CPU usage, memory usage, function call length and times, and call
By default, the PHP instruction MAGIC_QUOTES_GPC is on, and it automatically runs Addslashes () for all get, POST, and COOKIE data. Do not use Addslashes () on strings that have been escaped by MAGIC_QUOTES_GPC, because this can result in a double
Secure PHP Security Configuration
Date Created: 2001-11-12 update: 2003-08-06
Article Properties: Original
Article Source: http://www.xfocus.net
Article submission: san (san_at_xfocus.org)
Finishing: San
Version: 0.02
Date Created:
installation
1. First download PHP 5.2.5 (http://www.php.net/downloads.php)
The PHP installation path in this article takes c:\php
2. Download and get php-5.1.2-win32.zip, directly all to the C:\php\ directory can be php file storage directory c:
One, the error of the procedure itself
This error is a relatively easy to handle errors, such as syntax errors or the compiler can not resolve, these errors at compile time, will not compile, and then according to the wrong hint, to find the
array_change_key_case-returns an array with a string key that is all lowercase or uppercase
array_chunk-to split an array into multiple
Array_combine-creates an array with the value of one array as its key name and the value of the other array as
article/figure Security Angel Angel[bst] transferred from http://www.4ngel.net Author: Angel
Objective
My SQL injection with MySQL ("The Hacker Defense July topic") has a more comprehensive introduction to MySQL, but there is a very harmful function,
PHP supports 8 of original data types.
Four scalar types:
? Boolean (Boolean)
? Integer (integral type)
? Float (floating point type, also called double)
? String (strings)
Two types of composite:
? Array (arrays)
? Object (Objects)
Finally,
1. The MAGIC_QUOTES_GPC option in the PHP configuration file php.ini is not turned on and is set to off2. Developers do not check and escape data typesBut in fact, the 2nd is the most important. I think that it is the most basic quality of a web
Brief introduction
Major web properties, such as Wikipedia, Facebook, and Yahoo!, use the LAMP architecture to service millions of of requests a day, while Web application software such as Wordpress, Joomla, Drupal, and SugarCRM uses its
SQL attacks (SQL injection, Taiwan is called SQL data hidden-code attacks), referred to as injection attacks, are vulnerabilities that occur at the database level of the application. In short, you inject SQL instructions into the input string and
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.