Injection of Cookies in PHP + MYSQL Environment

Devil
 
The skills come from technology. When you browse the technology blog of the devil in the world, you will find that many articles in the technical form are still detailed, and articles in the technical form are, most of them force the title party to finish the content. Technical documents: You can understand and discover problems. You can explore and study a specific technical problem in depth to improve your technology and may make like-minded friends, however, the skill form is quick and quick. If there are more users, the results will only be abused to death.
 
Back to the question: this is a problem discovered when a foreigner's website is intruded. When you visit the home page, this cookie value will be generated. The purpose is to use cookies to determine the language.
 
Injection points are extremely demanding and concealed. They should not be get or post.
 
If you want to use php curl to obtain the COOKIE, inject it in the middle of the program. Helpless, programming is too bad, write a few lines of code errors, it is necessary to fill in PHP.
 
Manual injection, tired, direct. Take the time to complete the content.
 


First, version (), user (), database ().
 





 
Explosive table
 
 
 
Field explosion
Www.2cto.com
 
 
Burst administrator.
 
 
 
Next, go to the background.