摘要:
SQL防注入代码一'99','name'=>'a'b\'c";','note'=>"a'b'nc#"); } $age = (int)$_GET['age']; $name = quote($_GET['name']); $note = quote($_GET['note']); $sql = "I...
阅读全文
posted @ 2014-04-18 18:14
milantgh
阅读(447)
推荐(0)
编辑
摘要:
|||$value){$this->stopattack($key,$value,$this->getfilter);} foreach($_POST as $key=>$value){$this->stopattack($key,$value,$this->postfilter);} fore...
阅读全文
posted @ 2014-04-18 18:03
milantgh
阅读(1434)
推荐(0)
编辑
摘要:
实例:xss.xml 1 )|(?:[^\w\s]\s*\/>)|(?:>")]]> finds html breaking injections including whitespace attacks 1.使用$result = simplexml_load_file ( 'xss.xml',...
阅读全文
posted @ 2014-04-18 14:11
milantgh
阅读(675)
推荐(0)
编辑
摘要:
一,什么是xml,xml有什么用途 XML(Extensible Markup Language)即可扩展标记语言,它与HTML一样,都是SGML(Standard Generalized Markup Language,标准通用标记语言)。Xml是Internet环境中跨平台的,依赖于内容的...
阅读全文
posted @ 2014-04-18 13:15
milantgh
阅读(255)
推荐(0)
编辑