云演CTF: 010.php4fun

最新推荐文章于 2023-12-16 14:07:53 发布

183****1694

最新推荐文章于 2023-12-16 14:07:53 发布

阅读量964

点赞数

原文链接：https://www.wangguixiu.top/%E4%BA%91%E6%BC%94/%E4%BA%91%E6%BC%94CTF-010-php4fun.html

版权

云演CTF: 010.php4fun

作者: admin
时间: 2021-05-31
分类: 云演CTF

题目给出源码备份"index.bak":

<?php
function filter($v){
  echo $v;
  $w = array('<','>','\.\.','^/+.*','file:///','php://','data://','zip://','ftp://','phar://','zlib://','glob://','expect://','http://','https://');
  $w = implode('|',$w);
  if(preg_match('#' . $w . '#i',$v) !== 0){
    die("<br>not that easy.");
    exit();
  }
  return $v;
}

function get_post( $KaTeX parse error: Expected '}', got 'EOF' at end of input: \dots return array($ name,@file_get_contents(filter($name)));
}

?>
<!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”>
<html>
<head>
<title>php4fun</title>
</head>
<body>
<div class=“content”>
<div class=“toph”></div>
<div class=“center”>
<h1>have fun with php</h1>
<?php
if(!@$_GET[‘p’]){
foreach(get_posts() as $KaTeX parse error: Expected '}', got '&' at position 34: \dots ' &̲lt;h2><a \dots$ v[0].’">’. $KaTeX parse error: Expected 'EOF', got '&' at position 7: v[0].'&̲lt;/a></h\dots$ v[1].’
<p class=“date”> <a href="?p=’. $KaTeX parse error: Expected 'EOF', got '&' at position 8: v[0].'"&̲gt;Read more&lt\dots$ v=get_post(@ $KaTeX parse error: Expected '}', got '&' at position 41: \dots ' &̲lt;h2>'.$ v[0].’</h2>
‘.$v[1].’
<p class=“date”><a href="./">Back</a> </p>
<br />
';
}
?>
</div>
<div class=“footer”></div>
</div>

</body>
</html>