13. $_SERVER['PHP_SELF']ã¨XSS脆弱性皆ã•ã‚“ã¯åŒã˜ã‚¹ã‚¯ãƒªãƒ—トã¸ã®ãƒªãƒ³ã‚¯ã‚’貼る時ã€ã©ã®æ§˜ã«è¨˜è¿°ã—ã¦ã„ã¾ã™ã‹ï¼Ÿ $_SERVER['PHP_SELF']を用ã„ã‚‹ã“ã¨ãŒã‚ã‚‹ã®ã§ã¯ãªã„ã§ã—ょã†ã‹ã€‚ã“れを直接用 ã„ã‚‹ã“ã¨ã¯å±é™ºã§ã™ã€‚ãªãœãªã‚‰ã°ã€$_SERVER['PHP_SELF']ã«ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ クリプティング（XSS）脆弱性ãŒå˜åœ¨ã™ã‚‹ã‹ã‚‰ã§ã™ã€‚ $_SERVER['PHP_SELF']ã¯ã—ã°ã—ã°æ¬¡ã®ã‚ˆã†ã«ä½¿ã‚ã‚Œã¾ã™ã€‚ <form method="post" action="<?php echo $_SERVER['PHP_SELF'] ?>"> ã“ã®ãƒšãƒ¼ã‚¸ï¼ˆã“ã“ã§ã¯http:/www.example.jp/example.php）ã¸ä¸‹è¨˜ã®æ§˜ã«ãƒªãƒ³ã‚¯ を貼りã€ã‚¯ãƒªãƒƒã‚¯ã—ã¦ã¿ã¦ä¸‹ã•ã„。 <a href="http://www.example.jp/ example.php/%22%3E%3Cscript%3Ealert(%27XS
![13. $_SERVER['PHP_SELF']ã¨XSS脆弱性](https://cdn-ak-scissors.b.st-hatena.com/image/square/bed39b5962a5d552c95b6d796db8f55e72d32943/height=288;version=1;width=512/https%3A%2F%2Fxtech.nikkei.com%2Fimages%2Fn%2Fxtech%2F2020%2Fogp_nikkeixtech_hexagon.jpg%3F20220512)
HTML上ã§PHPã‚’å‹•ã‹ã™(ã•ãらサーãƒãƒ¼ï¼šæ”¹è¨‚）
$_SERVER['PHP_SELF']ã¯å±é™ºï¼Ÿ - [PHP + PHP] ãºã‚“ãŸã‚“ info
ã•ãらインターãƒãƒƒãƒˆã®ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã§HTMLã®ãƒ•ã‚¡ã‚¤ãƒ«ã§ã‚‚PHPãŒä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹æ–¹æ³• | 9ineBB
http://digit-01.com/ownpage/php_relative_add.html
ã¾ã‚‹ã‚€ã—アンテナ php include_once(include)ã‚„require_once(require)ã§å‘¼ã³å‡ºã•ã‚ŒãŸæ™‚ã€å‘¼å‡ºå…ƒãƒ•ã‚¡ã‚¤ãƒ«ã®æƒ…å ±ã‚’å¾—ã‚‹ã«ã¯ã€€debug_backtrace　を使ã†ã®ã˜ã‚ƒï¼
PHPã§WEBページã®ã‚¿ã‚¤ãƒˆãƒ«ã‚’抜ã出ã™ã‚µãƒ³ãƒ—ル | Creazy!
三日åŠä¸»ã®ãƒ•ãƒªãƒ¼ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢â€¦:ã€PHP】ç¾åœ¨ã®URLやファイルåã®å–得方法 - livedoor Blog（ブãƒã‚°ï¼‰
PHP: åˆ¶å¾¡æ§‹é€ ã«é–¢ã™ã‚‹åˆ¥ã®æ§‹æ–‡ - Manual
PHP: include - Manual
Web2.0ã®é“å…·ç®±: PHPã§ã®XMLファイルã®èªè¾¼ã¿
WordPressã§YouTube API ã‚’PHPã§è¨˜è¿°ã™ã‚‹è¦šãˆæ›¸ã。 | [k]id![WordPressã§YouTube API ã‚’PHPã§è¨˜è¿°ã™ã‚‹è¦šãˆæ›¸ã。 | [k]id](https://cdn-ak-scissors.b.st-hatena.com/image/square/58010acb677b2e12d767cba4964b80c2de081a8d/height=288;version=1;width=512/https%3A%2F%2Fkidokorock.com%2Fwp-content%2Fthemes%2Fkid_2015%2Fimages%2Fcommon%2Fthumbnail%2F4.jpg)
PHPã€æ–‡å—列比較ã§ã€Œ==ã€ã¯ç¦æ¢ï¼ - goungoun技術系雑記帳
{{#tags}}- {{label}}
{{/tags}}