PHP security

• .htaccess后门
  posted @ 2007-12-25 13:44 wofeiwo 阅读(523) | 评论 (1)  编辑
• [zt]PHP 5.2.4 mail.force_extra_parameters unsecure
  posted @ 2007-11-26 12:03 wofeiwo 阅读(260) | 评论 (0)  编辑
• 好久没更新
  posted @ 2007-07-24 22:42 wofeiwo 阅读(340) | 评论 (3)  编辑
• FleaPHP默认上传类的一个隐患
  posted @ 2007-05-30 16:56 wofeiwo 阅读(495) | 评论 (0)  编辑
• Developing A PHP Core Backdoor      摘要: 目录
  
  1)前言
  2)优缺点
  3)设计
  4)功能实现
  5)参考文档
  6)一些说明  阅读全文
  posted @ 2007-05-23 20:01 wofeiwo 阅读(503) | 评论 (0)  编辑
• The Month of PHP Bugs
  posted @ 2007-03-08 16:50 wofeiwo 阅读(401) | 评论 (0)  编辑
• PHP 5.2.0 session.save_path safe_mode and open_basedir bypass      摘要: 详情见内  阅读全文
  posted @ 2006-12-09 12:10 wofeiwo 阅读(526) | 评论 (0)  编辑
• PHP 5.2.0对Remote include的影响
  posted @ 2006-11-03 22:03 wofeiwo 阅读(658) | 评论 (0)  编辑
• n久没更新
  posted @ 2006-10-27 21:15 wofeiwo 阅读(229) | 评论 (0)  编辑
• PHP ZendEngine ECalloc Integer Overflow Vulnerability
  posted @ 2006-10-10 19:05 wofeiwo 阅读(208) | 评论 (0)  编辑
• 随便说说
  posted @ 2006-10-03 23:37 wofeiwo 阅读(222) | 评论 (2)  编辑
• 关于最近的几个open_basedir绕过漏洞      摘要: PHP 5.1.5 在8.17号发布了,修补了几个绕过open_basedir的漏洞,我们一个个来看:
  
  Quote form http://www.php.net/release_5_1_5.php
  
  --------------------------------------------------------------------------------
  Added missing safe_mode/open_basedir checks inside the error_log(), file_exists(), imap_open() and imap_reopen() functions.
  Fixed possible open_basedir/safe_mode bypass in cURL extension and with realpath cache.
  -----------------------------------------------------------------------------  阅读全文
  posted @ 2006-08-23 20:38 wofeiwo 阅读(190) | 评论 (0)  编辑
• punbb      摘要: something about punbb unset()  阅读全文
  posted @ 2006-08-21 10:24 wofeiwo 阅读(178) | 评论 (0)  编辑
• PHP Variable Zend Hash Calculater      摘要: zend_hash_del_key_or_index_vulnerability要用到的,写了个c方便计算 :)  阅读全文
  posted @ 2006-08-15 16:41 wofeiwo 阅读(209) | 评论 (0)  编辑
• PHP substr_compare() Vulnerability 浅析      摘要: Something about PHP substr_compare() Vulnerability  阅读全文
  posted @ 2006-08-15 14:42 wofeiwo 阅读(177) | 评论 (0)  编辑

Full PHP security Archive