SSRF常见代码实现

SSRF常见代码实现

<?php
	if(isset($_REQUEST['url'])){
	$link = $_REQUEST['url'];
	$filename = './curled/'.time().'.txt';
	$curlobj = curl_init($link);
	$fp = fopen($filename,"w");
	curl_setopt($curlobj,CURLOPT_FILE,$fp);
	curl_setopt($curlobj,CURLOPT_HEADER,0);
	curl_setopt($curlobj,CURLOPT_FOLLOWOCATION,TRUE);
	curl_exec($curlobj);
	curl_close($curlobj);
	fclose($fp);
	$fp = fopen($filename,"r");
	$result = fread($fp,filesize($filename));
	fclose($fp);
	echo $result;
}else{
	echo "?url=[url]";
}
?>