PHP process control statement

1. Conditional control statement 1. if statement if(expression){ Statement 1; Statement 2; } rand() function: get a random integer. <?php $num=rand(1,31); if ($num%2==0){ echo "\$num=$num"; echo '<br>$num It's an even number';#Single quotation marks output an ordinary string } ?> 2. If else s ...

Posted by JMM on Sun, 05 Dec 2021 22:36:23 +0100

Blocking Model for unix Network Model

My five handwritten network models, welcome comments and suggestions from all gods; Environment preparation: php7.4, swoole4.8.2. (Here I use mac)         Hobrew installation: Install Homebrew Tutorial-Accent Maple-Blog Park in China under mac         php installation: Install php7.4+mysql5.7+nginx e ...

Posted by andriy on Fri, 03 Dec 2021 18:38:35 +0100

The difference between run, start and create commands in docker

For beginners of Docker, the terms Docker start, docker run and docker create may be confusing. This article explains the differences through examples. catalogue The difference between Docker running, Docker starting and Docker creation If you are not familiar with docker and learn it through various tutorials, you may encounter terms such as ...

Posted by pspfreak101 on Thu, 02 Dec 2021 05:34:47 +0100

Summary of common web security problems (share common 12 attack types and defense measures)

Article catalog1. Understand the harm of web attacks.2. Share three common attacks and corresponding defense methods1. Harm of Web attack.What are the hazards of web attacks?A minor attack may steal users' information from your website. Serious web attacks can delete the database, paralyze the website and so on.2. Types of sharing attacks: sql ...

Posted by andycole on Sun, 21 Nov 2021 22:05:35 +0100

Problems of PHP high-end factory

Summary seen by boss General PHP interviews will ask about front-end knowledge, especially VUE. You need to know some front-end content PHP: What are CSRF and XSS attacks answer: 1.CSRF Basic concept, abbreviation and full name of CSRF(Cross-site request forgery) Cross-site request forgery 2.CSRF Attack principle of User is a website A ...

Posted by ubaldc36 on Sat, 20 Nov 2021 08:55:56 +0100

[Web security] php://filter Shallow bottom layer analysis

Create a new PHP file: a.php <?php $a = "a.txt"; include("php://filter/resource=" . $a); Create a new file in the same directory: a.txt (the content is <? PHP phpinfo();? > base64 encoding) PD9waHAgcGhwaW5mbygpOz8+ Next breakpoint in the related function of the corresponding file: [data] Post key codes: php_stream * php_strea ...

Posted by homer.favenir on Tue, 02 Nov 2021 06:58:08 +0100

Briefly explain how to bypass PHP disable_function

preface In the penetration test, sometimes the command cannot be executed after getting the webshell. In order to successfully raise the right, we need to bypass disable_function disable_ Introduction to function disable_ Functions is a setting option in php.ini. It can be used to set the PHP environment to prohibit the use of some fu ...

Posted by chrima on Mon, 01 Nov 2021 09:30:01 +0100

changxie work record

Work plan for March No. 3.8 Build and install nextcloud development environment through docker compose Completed. No. 3.9 There are two ways to develop new apps in apps. One is through the application skeleton generator app store , generate a skeleton app online. Another way is to download the framework on Github app-tutorial. No. 3.10 L ...

Posted by joe2 on Tue, 19 Oct 2021 04:50:12 +0200

YII chain learning deserialization

Learning ideas of YII deserialization chain: The first choice to learn deserialization is to find the chain in the yii framework. This is also a simple and slightly clear reproduction attempt to summarize the chains dug by other bosses Article 1: CVE-2020-15148 (0day) Idea: First, we must construct a chain according to a deserialized point. ...

Posted by Shit4Brains on Wed, 13 Oct 2021 20:04:31 +0200

buu-[WANGDING Cup 2018]Comment

Enter the topic Prompt to log in when posting. The password is 666 in bp Then, the posting form is very similar to the secondary injection of the previous question. First, construct the sql statement, and then output it in the message interface I tried it a little, but I couldn't leave a message if there was a problem After finding such a s ...

Posted by grayscale2005. on Wed, 13 Oct 2021 17:16:44 +0200