Tips for PHP Injection

Author: fallen leaves fly [JJSEX] From: http://hi.baidu.com/jluoye

I 've been using it for a long time. It's not a new thing, but it seems that I have never heard of anyone.

I often see people writing articles saying that I found the PHP injection point and put it in pangolin. I don't know if I opened GPC.

In fact, this is not so troublesome, and pangolin cannot be injected many times.

For example, an injection point: luoye. php? Jjsex = 1

After and 1 = 1 and 1 = 2, how can we determine if he has not enabled GPC?

Submit luoye. php? Jjsex = 1 and 1 = 1 /*

If the returned result is normal, it means that GPC is not enabled, and vice versa.

I am not clear about the pangolin judgment statement, and I am too lazy to capture packets. If you are interested, capture the packets and tell me