CTF赛题-[网鼎杯2020青龙组]AreUSerialz

代码审计

<?php

include("flag.php");

highlight_file(__FILE__);

class FileHandler {
   

    protected $op;
    protected $filename;
    protected $content;

    function __construct() {
   
        $op = "1";
        $filename = "/tmp/tmpfile";
        $content = "Hello World!";
        $this->process();
    }

    public function process() {
   
        if($this->op == "1") {
   
            $this->write();
        } else if($this->op == "2") {
   
            $res = $this->read();
            $this->output($res);
        } else {
   
            $this->output("Bad Hacker!");
        }
    }

    private function write() {
   
        if(isset($this->filename) && isset($this->content)) {
   
            if(strlen((string)$this->content) > 100) {
   
                $this->