[B! PHP] N_Tã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

N_T id:N_T

PHPã«é–¢ã™ã‚‹N_Tã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€Œã„ã¡ã°ã‚“ã‚„ã•ã—ã„PHPã®æ•™æœ¬ã€ã®ãƒ¬ãƒ“ãƒ¥ãƒ¼ã‚’æ‹…å½“ã—ã¾ã—ãŸ
æŸå²¡ ç§€ç”·ã•ã‚“ã€æ± ç”° å‹åã•ã‚“å…±è‘—ã®ã€Œã„ã¡ã°ã‚“ã‚„ã•ã—ã„PHPã®æ•™æœ¬ äººæ°—è¬›å¸«ãŒæ•™ãˆã‚‹å®Ÿè·µWebãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã€ã®ãƒ¬ãƒ“ãƒ¥ãƒ¼ã‚’æ‹…å½“ã„ãŸã—ã¾ã—ãŸã€‚ æŸå²¡ã•ã‚“ã¨ã¯é¢è˜ãŒã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸãŒã€ãƒ¡ãƒ¼ãƒ«ã«ã¦ä¾é ¼ã‚’ã„ãŸã ãã€ãŠå—ã‘ã™ã‚‹ã‹ã©ã†ã‹è¿·ã£ãŸã®ã§ã€Œã‚²ãƒ©ã‚’è¦‹ã›ã¦ã„ãŸã ã„ãŸã‹ã‚‰ãŠè¿”äº‹ã—ã¾ã™ã€ã¨ç”ãˆãŸã¨ã“ã‚ã€ã•ã£ããã«é€ä»˜ã„ãŸã ãã€ãã‚Œã‚’ç¢ºèªã—ãŸä¸Šã§ãŠå¼•ãå—ã‘ã„ãŸã—ã¾ã—ãŸã€‚ è¦‹ã›ã¦ã„ãŸã ã„ãŸåŽŸç¨¿ã¯å…ƒã€…ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¯ã—ã£ã‹ã‚Šé…æ…®ã•ã‚Œã¦æ›¸ã‹ã‚Œã¦ã„ã¾ã—ãŸãŒã€ç´°ã‹ã„ã¨ã“ã‚ã®æŒ‡æ‘˜ã‚’ä½•ç‚¹ã‹ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ä¾‹ãˆã°ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®æ‰±ã„ãªã©ã§ã™ãã€‚æŒ‡æ‘˜ã«ã¯å¿«ãå¯¾å¿œã„ãŸã ãã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ ç›®æ¬¡ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ PHPã‚’å¦ã¶æº–å‚™ã‚’ã—ã‚ˆã† ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œã‚ŠãªãŒã‚‰PHPã®åŸºæœ¬ã‚’å¦ã¼ã† ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚’ä½œæˆã—ã‚ˆã† ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¨çµ„ã¿åˆã‚ã›ãŸãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œã‚ã† åŒæ›¸ã®ç‰¹å¾´ã§ã™ãŒã€ã€Œã„ã¡ã°ã‚“ã‚„ã•ã—ã„ã€ã¨è¡¨é¡Œã«ã‚ã‚‹é€šã‚Š
N_T 2015/05/08
programming

PHP
ãƒªãƒ³ã‚¯
ã€Œ10æ—¥ã§ãŠã¼ãˆã‚‹PHPå…¥é–€æ•™å®¤ ç¬¬4ç‰ˆã€ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã§é«˜è©•ä¾¡
å¼Šç¤¾æœ¬ç¤¾ã®éº»å¸ƒåç•ªç§»è»¢ã«ä¼´ã„ã€æœ¬ç¤¾è¿‘ãã®éº»å¸ƒå›³æ›¸é¤¨ã‚’åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚éº»å¸ƒå›³æ›¸é¤¨ã¯åœŸåœ°æŸ„ã®ã‚¤ãƒ¡ãƒ¼ã‚¸ã«ã‚ã†ç€Ÿæ´’ãªå»ºç‰©ã§ã€è”µæ›¸ãŒãªã„å ´åˆã¯æ¸¯åŒºã®ä»–ã®å›³æ›¸é¤¨ã‹ã‚‰å–ã‚Šå¯„ã›ï¼ˆç„¡æ–™ã§ã™ï¼‰ãŒã§ãã¾ã™ã®ã§ã€ã‚ˆãåˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ä»Šå›žã¯ã€å±±ç”°ç¥¥å¯›ã•ã‚“ã®ã€Œ10æ—¥ã§ãŠã¼ãˆã‚‹PHPå…¥é–€æ•™å®¤ ç¬¬4ç‰ˆ ã€ã‚’å€Ÿã‚Šã¦èªã‚“ã§ã¿ã¾ã—ãŸã€‚ä¸€èªã—ã¦ã€æœ¬æ›¸ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã‚‚ã‚ˆãé…æ…®ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã«ã”ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS) è¡¨ç¤ºã®éš›ã«HTMLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã¨ã„ã†åŽŸå‰‡ã‚’å¿ å®Ÿã«å®ˆã£ã¦ã„ã¾ã™ã€‚ãã®ãŸã‚ã€ä¸‹è¨˜ã® e() ã¨ã„ã†é–¢æ•°ã‚’å®šç¾©ã—ã¦å‘¼ã³å‡ºã—ã¦ã„ã¾ã™ã€‚ function e($str, $charset = 'UTF-8') { return htmlspecialchars($str, ENT_QUOTES, $charset); } ãã®ä»–ã«ã‚‚XSSå¯¾ç–ã¨ã—ã¦é‡è¦ãªä¸‹è¨˜ã®
N_T 2015/04/25
programming

PHP

security
ãƒªãƒ³ã‚¯
PHPã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è§£èª¬æ›¸12ç¨®é¡žã‚’èªã‚“ã§SQLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®è§£èª¬çŠ¶æ³ã‚’èª¿ã¹ã¦ã¿ãŸ
ã“ã®æŠ•ç¨¿ã¯PHP Advent Calendar 2013ã®13æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚æ˜¨æ—¥ã¯@tanakahisateruã®PHPãŒç³žè¨€èªžãªã®ã¯ã©ã†è€ƒãˆã¦ã‚‚å‚ç…§ã‚’ãƒã‚¤ãƒ³ã‚¿ã ã¨æ€ã£ã¦ã„ã‚‹ãŠå‰ã‚‰ãŒæ‚ªã„ã§ã—ãŸã€‚ ç¾åœ¨twitterã®ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã§ã€å²ä¸Šç©ºå‰ã®SQLã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãƒ–ãƒ¼ãƒ ãŒèµ·ã“ã£ã¦ã„ã¾ã™ã€‚ ã‚ªãƒ¬ã‚ªãƒ¬SQL ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ•™è‚²ã¯è«–ç†çš„ã«ç ´ç¶»ã—ã¦ã„ã‚‹Â | yohgaki's blog ã€Œãƒ—ãƒªãƒšã‚¢ãƒ¼ãƒ‰ã‚¯ã‚¨ãƒªãŒåŸºæœ¬ã ã‘ã©ã€å‹•çš„ã« SQL ã‚’çµ„ã¿ç«‹ã¦ã‚‹å ´åˆã‚‚ã‚ã‚‹ã‹ã‚‰ã€ãã†ã„ã†å ´åˆã«å‚™ãˆã¦ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚‚çŸ¥ã£ã¦ãŠã„ãŸã»ã†ãŒã„ã„ã‹ã‚‚ã€ - Togetterã¾ã¨ã‚ ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¨ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã‚’ã‚ãã‚‹è°è«– - Togetterã¾ã¨ã‚ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã¨ã—ã¦ã®ãƒ—ãƒªãƒšã‚¢ãƒ‰ã‚¹ãƒ†ãƒ¼ãƒˆãƒ¡ãƒ³ãƒˆã¨ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã«ã¤ã„ã¦ã®è°è«– - Togetterã¾ã¨ã‚ IPAã®ã€Œå®‰å…¨ãªSQLã®å‘¼ã³å‡ºã—æ–¹ã€ãŒå®‰å…¨ã«ãªã£ã¦ã„ãŸ | yohgak
N_T 2013/12/14
security

programming

PHP

SQL
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

PHPã«é–¢ã™ã‚‹N_Tã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬4é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬3é€±ï¼‰

ã€å®Œäº†ã€‘ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®è¨ˆç”»ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŠçŸ¥ã‚‰ã›ï¼ˆ2026å¹´1æœˆ23æ—¥(é‡‘) æ·±å¤œ1:30ã€œ3:00ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

PHPã«é–¢ã™ã‚‹N_Tã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ã€Œã„ã¡ã°ã‚“ã‚„ã•ã—ã„PHPã®æ•™æœ¬ã€ã®ãƒ¬ãƒ“ãƒ¥ãƒ¼ã‚’æ‹…å½“ã—ã¾ã—ãŸ

ã€Œ10æ—¥ã§ãŠã¼ãˆã‚‹PHPå…¥é–€æ•™å®¤ ç¬¬4ç‰ˆã€ã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£é¢ã§é«˜è©•ä¾¡

PHPã¨ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®è§£èª¬æ›¸12ç¨®é¡žã‚’èª­ã‚“ã§SQLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®è§£èª¬çŠ¶æ³ã‚’èª¿ã¹ã¦ã¿ãŸ

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬4é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬3é€±ï¼‰

ã€å®Œäº†ã€‘ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®è¨ˆç”»ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŠçŸ¥ã‚‰ã›ï¼ˆ2026å¹´1æœˆ23æ—¥(é‡‘) æ·±å¤œ1:30ã€œ3:00ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

PHPã«é–¢ã™ã‚‹N_Tã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ã€Œã„ã¡ã°ã‚“ã‚„ã•ã—ã„PHPã®æ•™æœ¬ã€ã®ãƒ¬ãƒ“ãƒ¥ãƒ¼ã‚’æ‹…å½“ã—ã¾ã—ãŸ

ã€Œ10æ—¥ã§ãŠã¼ãˆã‚‹PHPå…¥é–€æ•™å®¤ ç¬¬4ç‰ˆã€ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã§é«˜è©•ä¾¡

PHPã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è§£èª¬æ›¸12ç¨®é¡žã‚’èªã‚“ã§SQLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®è§£èª¬çŠ¶æ³ã‚’èª¿ã¹ã¦ã¿ãŸ

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬4é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬3é€±ï¼‰

ã€å®Œäº†ã€‘ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®è¨ˆç”»ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŠçŸ¥ã‚‰ã›ï¼ˆ2026å¹´1æœˆ23æ—¥(é‡‘) æ·±å¤œ1:30ã€œ3:00ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹