锟斤拷锟斤拷 PHP 锟侥帮拷全锟斤拷锟斤拷说锟斤拷锟襟报革拷锟斤拷一锟斤拷双锟叫斤拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷锟竭帮拷全锟皆ｏ拷锟斤拷一锟斤拷锟斤拷锟斤拷锟叫猴拷锟斤拷
锟斤拷锟斤拷系统时锟斤拷锟斤拷使锟矫碉拷锟街凤拷锟斤拷锟斤拷锟斤拷锟诫不锟斤拷确锟斤拷锟斤拷锟捷ｏ拷然锟斤拷榭达拷锟斤拷锟斤拷锟绞撅拷锟斤拷锟斤拷图锟斤拷锟斤拷锟斤拷摹锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷诠锟斤拷锟斤拷锟斤拷占锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟较拷员锟窖帮拷锟斤拷锟斤拷恪ｏ拷锟斤拷锟剿碉拷锟斤拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷知锟斤拷锟斤拷一锟斤拷页锟斤拷锟斤拷锟斤拷锟节的憋拷锟斤拷息锟斤拷锟斤拷么锟斤拷锟酵会尝锟斤拷锟睫改憋拷锟斤拷锟斤拷
Example #1 锟斤拷锟皆讹拷锟斤拷锟� HTML 页锟芥攻锟斤拷锟斤拷锟斤拷
<form method="post" action="attacktarget?username=badfoo&password=badfoo"> <input type="hidden" name="username" value="badfoo" /> <input type="hidden" name="password" value="badfoo" /> </form>
通锟斤拷 PHP 锟斤拷锟斤拷锟截的达拷锟斤拷锟斤拷示锟斤拷锟杰帮拷锟斤拷锟斤拷锟斤拷锟竭碉拷锟皆筹拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷母锟斤拷募锟斤拷锟斤拷锟叫╋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟街革拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷募锟斤拷牡诩锟斤拷校锟斤拷锟叫╋拷锟斤拷锟� PHP 锟斤拷锟斤拷锟斤拷锟杰革拷锟斤拷锟斤拷锟斤拷息锟斤拷锟杰讹拷 PHP 锟斤拷锟斤拷锟竭伙拷使锟斤拷 show_source()锟斤拷highlight_string() 锟斤拷锟斤拷 highlight_file() 锟斤拷锟斤拷锟斤拷锟斤拷锟皆达拷锟诫，锟斤拷锟斤拷锟斤拷锟斤拷式锟斤拷锟叫碉拷锟斤拷站锟叫ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟杰会暴露锟斤拷锟斤拷锟截的憋拷锟斤拷锟斤拷未锟斤拷锟斤拷锟斤法锟斤拷锟斤拷锟斤拷锟侥匡拷锟斤拷危锟斤拷系统锟斤拷全锟斤拷锟斤拷息锟斤拷锟斤拷锟斤拷锟斤拷一些锟斤拷锟斤拷锟节诧拷锟斤拷锟皆达拷锟斤拷某锟斤拷颍锟斤拷锟绞癸拷锟酵拷玫锟斤拷约锟斤拷锟斤拷呛锟轿ｏ拷盏摹锟斤拷锟斤拷锟矫癸拷锟斤拷锟斤拷确锟斤拷锟剿筹拷锟斤拷锟斤拷使锟斤拷锟斤拷锟斤拷锟街撅拷锟斤拷牡锟斤拷约锟斤拷锟斤拷锟斤拷锟斤拷腔岢拷苑锟斤拷捅锟斤拷锟斤拷锟斤拷蚩锟斤拷怨锟斤拷埽锟�
Example #2 锟斤拷锟矫憋拷锟斤拷锟津开碉拷式锟斤拷锟斤拷
<form method="post" action="attacktarget?errors=Y&showerrors=1&debug=1"> <input type="hidden" name="errors" value="Y" /> <input type="hidden" name="showerrors" value="1" /> <input type="hidden" name="debug" value="1" /> </form>
锟斤拷锟杰达拷锟斤拷锟斤拷锟斤拷锟斤拷锟轿ｏ拷锟斤拷锟斤拷探锟斤拷系统锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟结供锟斤拷锟斤拷锟斤拷息锟斤拷
锟斤拷锟斤拷说锟斤拷PHP 锟侥讹拷锟叫的达拷锟斤拷锟斤拷示锟斤拷锟斤拷锟斤拷说锟斤拷系统锟斤拷锟斤拷锟斤拷 PHP锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟窖帮拷锟揭伙拷锟� .html 为页锟芥，锟斤拷知锟斤拷锟斤拷锟教拷募锟斤拷锟斤拷锟轿拷锟窖帮拷锟较低筹拷锟斤拷悖╋拷锟斤拷锟斤拷蔷突锟窖达拷锟斤拷锟斤拷锟斤拷锟斤拷峤伙拷锟饺ワ拷锟饺伙拷锟斤拷锟叫匡拷锟皆碉拷知系统锟角伙拷锟斤拷 PHP 锟斤拷锟剿★拷
一锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷涂锟斤拷鼙锟铰断低筹拷锟斤拷锟绞癸拷玫锟斤拷锟斤拷菘猓拷锟斤拷锟轿拷锟斤拷锟斤拷锟斤拷峁╋拷泄锟斤拷锟揭筹拷锟斤拷锟斤拷锟斤拷锟斤拷品锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷息锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷顺锟斤拷锟斤拷锟较碉拷锟揭碉拷锟斤拷锟脚碉拷锟斤拷锟捷匡拷丝冢锟斤拷约锟揭筹拷锟斤拷锟侥承� bug 锟斤拷锟斤拷锟斤拷取锟斤拷锟斤拷锟剿碉拷锟斤拷锟斤拷锟斤拷呖锟斤拷锟揭恍╋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟绞癸拷锟斤拷锟斤拷锟斤拷锟斤拷探锟斤拷疟锟斤拷锟斤拷锟街わ拷锟剿筹拷锟酵拷锟斤拷锟斤拷锟斤拷锟绞撅拷锟斤拷泻锟斤拷锟斤拷郑锟斤拷约锟斤拷疟锟斤拷锟斤拷锟斤拷锟轿伙拷每锟斤拷锟叫孤讹拷锟斤拷锟较拷锟�
一锟斤拷锟侥硷拷系统锟斤拷锟斤拷 PHP 锟侥达拷锟斤拷突岜┞� web 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷什么权锟睫ｏ拷锟皆硷拷锟侥硷拷锟节凤拷锟斤拷锟斤拷锟较碉拷锟斤拷织锟结构锟斤拷锟斤拷锟斤拷锟斤拷锟皆硷拷写锟侥达拷锟斤拷锟斤拷锟斤拷泳锟斤拷锟斤拷锟解，锟斤拷锟斤拷泄漏锟斤拷原锟斤拷锟斤拷锟截碉拷锟斤拷息锟斤拷
锟斤拷锟斤拷锟斤拷锟斤拷锟矫的办法锟斤拷锟斤拷锟斤拷些锟斤拷锟解。锟斤拷一锟斤拷锟角筹拷锟阶地硷拷锟斤拷锟斤拷泻锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷植锟斤拷锟斤拷锟斤拷锟斤拷锟襟。第讹拷锟斤拷锟角讹拷锟斤拷锟斤拷系统锟斤拷锟阶关闭达拷锟襟报告。锟斤拷锟斤拷锟斤拷锟斤拷使锟斤拷 PHP 锟皆讹拷锟斤拷拇锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷约锟斤拷拇锟斤拷锟斤拷锟斤拷锟狡★拷锟斤拷锟捷诧拷同锟侥帮拷全锟斤拷锟皆ｏ拷锟斤拷锟街凤拷锟斤拷锟斤拷锟杰讹拷锟斤拷锟矫★拷
一锟斤拷锟斤拷锟斤拷前锟斤拷止锟斤拷锟斤拷锟斤拷夥拷锟斤拷姆锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� error_reporting() 锟斤拷锟斤拷锟斤拷使锟斤拷锟斤拷锟斤拷锟饺拷锟斤拷锟斤拷直锟斤拷锟绞癸拷玫锟轿ｏ拷锟街拷锟斤拷锟斤拷诜锟斤拷锟斤拷锟斤拷锟街帮拷锟斤拷却锟� E_ALL 锟斤拷锟皆达拷锟诫，锟斤拷锟皆帮拷锟斤拷芸锟斤拷业锟斤拷锟斤拷锟绞癸拷貌锟斤拷锟斤拷牡胤锟斤拷锟揭伙拷锟阶硷拷锟斤拷锟绞斤拷锟斤拷锟斤拷锟斤拷锟接︼拷冒锟� error_reporting() 锟侥诧拷锟斤拷锟斤拷为 0 锟斤拷锟斤拷锟阶关闭达拷锟襟报革拷锟斤拷甙锟� php.ini 锟叫碉拷 display_errors 锟斤拷为 off 锟斤拷锟截憋拷锟斤拷锟叫的达拷锟斤拷锟斤拷示锟皆斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟教斤拷狻ｏ拷锟饺伙拷锟斤拷锟斤拷要锟斤拷一些锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟酵诧拷要锟斤拷锟角达拷 ini 锟侥硷拷锟节碉拷 log_errors 选锟筋，锟斤拷通锟斤拷 error_log 指锟斤拷锟斤拷锟节硷拷录锟斤拷锟斤拷锟斤拷息锟斤拷锟侥硷拷锟斤拷
Example #3 锟斤拷 E_ALL 锟斤拷锟斤拷锟斤拷危锟秸的憋拷锟斤拷
<?php
if ($username) { // Not initialized or checked before usage
$good_login = 1;
}
if ($good_login == 1) { // If above test fails, not initialized or checked before usage
readfile ("/highly/sensitive/data/index.html");
}
?>