分类目录归档：技术空间

A Study In Scarlet – Exploiting Common Vulnerabilities in PHP Applications

发表于由
回复

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<->>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

                           A Study In Scarlet
          Exploiting Common Vulnerabilities in PHP Applications

                                                                Shaun Clowes
                                                               SecureReality

“A reprint of reminisces from the Blackhat Briefings Asia 2001”

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<->>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

— < Table of Contents > ————————————————–

1. Introduction
2. Caveats and Scope
3. Global Variables
4. Remote Files
5. File Upload
6. Library Files
7. Session Files
8. Loose Typing And Associative Arrays
9. Target Functions
10. Protecting PHP
11. Responsibility – Language vs Programmer
12. Other

“I could imagine his giving a friend a little pinch of the latest vegetable
alkaloid, not out of malevolence, you understand, but simply out of a spirit
of inquiry in order to have an accurate idea of the effects.” – Stamford
[……]

继续阅读

什么是面包屑型网站导航链接？

发表于由
回复

　　在童话故事“汉泽尔和格雷特尔”中，当汉泽尔和格雷特尔穿过森林时，他们在沿途走过的地方都撒下了面包屑，让这些面包屑来帮助他们找到回家的路。虽然这只是一个孩子们的童话故事，但它却蕴涵了多种含义。实际上，网站设计者亦可从中受到启发：在结构上纵深的网站应该采用这种“面包屑型”结构，以足迹的方式呈现用户走[……]

继续阅读