Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

File inclusion vulnerability (Unix system) WASC Thre exists in the application

2025-03-26 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/02 Report--

The upstairs way of replacing $_ REQUEST is not suitable for some situations. Call this function at the top of your page to convert_req ($_ REQUEST)

Provide functions:

/ / request transcoding

Function convert_req ($req)

{

Foreach ($req as $k = > $v)

{

If (is_array ($v))

{

Convert_req ($req [$k])

}

Else

{

If (! is_u8 ($v))

{

$req [$k] = iconv ("gbk", "utf-8", $v)

}

$req [$k] = trim ($req [$k]); / / $s is the parameter to be filtered

$req [$k] = strip_tags ($req [$k], ""); / / clear codes such as HTML

$req [$k] = str_replace ("\ n", ", str_replace (", ", $req [$k])); / / remove spaces and line feeds

$req [$k] = str_replace ("\ t", "", $req [$k]); / / remove tabulation symbols

$req [$k] = str_replace ("\ r\ n", "", $req [$k]); / / remove the enter feed symbol

$req [$k] = str_replace ("\ r", "", $req [$k]); / / remove enter

$req [$k] = str_replace ("'", "", $req [$k]); / / remove single quotation marks

$req [$k] = str_replace (".. /", ", $req [$k]); / / remove".. / "

$req [$k] = trim ($req [$k])

}

}

}

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report