In my form, why does the submission time out when a single quotation mark is entered? if it cannot be submitted, it is not an injection. if it is a form that Times out when a single quotation mark or double quotation mark is entered, it will time out.
Apache2.24, php5.3.27
Black
Reply to discussion (solution)
What about your action?
No? Super? Ah.
Just submit to this? .
Black
What browser did you use for testing? Try it with several browsers.
What about your action?
If this parameter is not specified, it should be submitted to this page by default. This is my test website, and cannot be submitted by entering quotation marks:
Http://www.getbook.cn/ImageEditor/4.htm? TbName = hjg
What browser did you use for testing? Try it with several browsers.
Ie and Google have tried it. this is the test page. if you try it, I will set up two apache servers, windows2003, apache2.2.4
Http://www.getbook.cn/ImageEditor/4.htm
In php. ini, enable the error prompt function.
Display_errors = On
Restart Apache.
In php. ini, enable the error prompt function.
Display_errors = On
Restart Apache.
Access. log of the logs directory under apache
123.125.71.58--[01/Dec/2014: 21: 59: 51 + 0800] "GET/images/201307/goods_img/36_g_1321362894106.jpg HTTP/1.1" 200 30764
61.180.165.187--[01/Dec/2014: 21: 59: 58 + 0800] "GET/ImageEditor/4.htm HTTP/1.1" 304-
Error. log
[Mon Dec 01 21:59:39 2014] [notice] Apache/2.2.4 (Win32) PHP/5.3.27 configured -- resuming normal operations
[Mon Dec 01 21:59:39 2014] [notice] Server built: Jan 9 2007 23:17:20
[Mon Dec 01 21:59:39 2014] [notice] Parent: Created child process 4964
[Mon Dec 01 21:59:39 2014] [notice] Child 4964: Child process is running
[Mon Dec 01 21:59:39 2014] [notice] Child 4964: Acquired the start mutex.
[Mon Dec 01 21:59:39 2014] [notice] Child 4964: Starting 250 worker threads.
[Mon Dec 01 21:59:39 2014] [notice] Child 4964: Starting thread to listen on port 80.
Is your code really only those in the main post?
Enable the error prompt function and test whether an error is reported on the page.
Is your code really only those in the main post?
Enable the error prompt function and test whether an error is reported on the page.
The code is posted. you can see the test page. the code is like this,
Http://www.getbook.cn/ImageEditor/4.htm
Clicking Submit times out, but the address bar shows http://www.getbook.cn/ImageEditor/4.htm? TbName = % 27
There is a firewall in front of this server, and the anti-intrusion magic horse, will they intercept it?
Maybe, you can close the firewall and the anti-intrusion magic horse.
Page submission. how do you receive it?
This ..... I tested it without timeout. Have you changed the code?
Okay, it should be about the network equipment in the server room.
No timeout found during the test
