当前位置:网站首页>Thinkphp3.2 information disclosure
Thinkphp3.2 information disclosure
2022-07-07 09:40:00 【qq_ forty-two million three hundred and seven thousand five hun】
Log information disclosure
thinkphp In the open debug In the case of Runtime Directory generation log , If debug The mode is not off , You can directly enter the input force to cause directory traversal
Thinkphp3.2 structure :\Application\Runtime\Logs\Home\22_07_05.log
Thinkphp3.1:\Runtime\Logs\Home\22_07_05.log
index.php Turn on debug Pattern
<?php
// +----------------------------------------------------------------------
// | ThinkPHP [ WE CAN DO IT JUST THINK ]
// +----------------------------------------------------------------------
// | Copyright (c) 2006-2014 http://thinkphp.cn All rights reserved.
// +----------------------------------------------------------------------
// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
// +----------------------------------------------------------------------
// | Author: liu21st <[email protected]>
// +----------------------------------------------------------------------
// Application entry file
// testing PHP Environmental Science
if(version_compare(PHP_VERSION,'5.3.0','<')) die('require PHP > 5.3.0 !');
// Turn on debugging mode Suggest to start the development phase Deployment phase comment or set to false
define('APP_DEBUG',True);
// Define the web address
define('SITE_URL','http://www.tp.com:8080/index.php');
// Define the application directory
define('APP_PATH','./Application/');
// introduce ThinkPHP Entrance file
require './ThinkPHP/ThinkPHP.php';
// Pro - ^_^ There is no need for any code later It's so simple
Cache leaks
F Method
S Method
<?php
namespace Home\Controller;
use Think\Controller;
class TestController extends Controller {
public function index(){
F("data","<?php phpinfo() ?>");// Fast cache , This method can be used in /Data/ Generate under directory data.php The content of the document is phpinfo()
S("data","123456");// Using this method will be in Temp Create one in the directory md5 A file with a filename
}
public function login(){
$this->display();
}
}
Enable debugging trace
\Application\Home\Conf\config.php
边栏推荐
- (3/8) method parameters of improper use of enumeration (2)
- Octopus future star won a reward of 250000 US dollars | Octopus accelerator 2022 summer entrepreneurship camp came to a successful conclusion
- 【BW16 应用篇】安信可BW16模组/开发板AT指令实现MQTT通讯
- Connecting mobile phone with ADB
- Unity shader (pass user data to shader)
- How to become a senior digital IC Design Engineer (5-3) theory: ULP low power design technology (Part 2)
- Sublime Text4 download the view in bower and set the shortcut key
- Mysql database transaction learning notes
- How to become a senior digital IC Design Engineer (5-2) theory: ULP low power design technology (Part 1)
- How does mongodb realize the creation and deletion of databases, the creation of deletion tables, and the addition, deletion, modification and query of data
猜你喜欢
Esp8266 uses TF card and reads and writes data (based on Arduino)
H5网页播放器EasyPlayer.js如何实现直播视频实时录像?
Lecture 1: stack containing min function
iNFTnews | 时尚品牌将以什么方式进入元宇宙?
NATAPP内网穿透
面试被问到了解哪些开发模型?看这一篇就够了
Huawei HCIP - datacom - Core 03 jours
战略合作|SubQuery 成为章鱼网络浏览器的秘密武器
浏览器中如何让视频倍速播放
How to use clipboard JS library implements copy and cut function
随机推荐
Variable parameter of variable length function
[SVN] what is SVN? How do you use it?
第一讲:寻找矩阵的极小值
软件建模与分析
如何成为一名高级数字 IC 设计工程师(1-6)Verilog 编码语法篇:经典数字 IC 设计
sql 里面使用中文字符判断有问题,哪位遇到过?比如value&lt;&gt;`无`
SAP MM STO单据的外向交货单创建后新加ITEM?
Niuke - Huawei question bank (61~70)
Jmeters use
What is MD5
Mysql database transaction learning notes
網易雲微信小程序
Jenkins modifies the system time
Liunx command
Pick up the premise idea of programming
Lesson 1: finding the minimum of a matrix
Huawei hcip datacom core_ 03day
Unity shader (learn more about vertex fragment shaders)
Unity3d interface is embedded in WPF interface (mouse and keyboard can respond normally)
华为HCIP-DATACOM-Core_03day