2、暴力破解-medium
分析源码
<?php
if( isset( $_GET[ 'Login' ] ) ) {
//是否提交login
// Sanitise username input
$user = $_GET[ 'username' ];//获取username值
$user = ((isset($GLOBALS["___mysqli_ston"]) && is_object($GLOBALS["___mysqli_ston"])) ? mysqli_real_escape_string($GLOBALS["___mysqli_ston"], $user ) : ((trigger_error(