[B! php] c-yanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

c-yan id:c-yan

phpã«é–¢ã™ã‚‹c-yanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç±³Zend Technologiesã€Zend Framework 1.0.0ã‚’ãƒªãƒªãƒ¼ã‚¹ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
ç±³Zend Techno logiesã¯2æ—¥ã€ã€ŒZend Frameworkã€ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³1.0ã‚’å…¬é–‹ã—ãŸã“ã¨ã‚’ç™ºè¡¨ã—ãŸã€‚Zend Frameworkã¯PHPãƒ™ãƒ¼ã‚¹ã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã§ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã‚’åŠ¹çŽ‡åŒ–ã™ã‚‹ã‚‚ã®ã€‚ 2005å¹´10æœˆã«é–‹å‚¬ã•ã‚ŒãŸZend Conferenceã§é–‹ç™ºæ„å‘è¡¨æ˜ŽãŒè¡Œã‚ã‚Œã€2006å¹´4æœˆã«ã¯ãƒ—ãƒ¬ãƒªãƒªãƒ¼ã‚¹ç‰ˆãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã€‚Zend Frameworkã®é–‹ç™ºã«ã¯230åã®å€‹äººãŠã‚ˆã³Googleã€IBMãŠã‚ˆã³Zendã¨ã„ã£ãŸä¼æ¥ã®æ”¯æ´ã‚’å—ã‘ãŸã‚¢ã‚¯ãƒ†ã‚£ãƒ–ãªè²¢çŒ®è€…ãŒå‚åŠ ã—ãŸã€‚ãƒ—ãƒ¬ãƒªãƒªãƒ¼ã‚¹ç‰ˆã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰æ•°ã¯100ä¸‡å›žä»¥ä¸Šã«ã®ã¼ã‚‹ã¨ã„ã†ã€‚ä»Šå›žç™ºè¡¨ã•ã‚ŒãŸæ£å¼ç‰ˆã¯ã€ã“ã¡ã‚‰ã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ãã‚‹ã€‚ åŒç¤¾ã®å…±åŒCTOãŠã‚ˆã³å…±åŒè¨ç«‹è€…ã®Andi Gutmansæ°ã¯ã€Zend Frameworkã®ç›®çš„ã‚’ã€ã€ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŠã‚ˆã³Web S
c-yan 2007/07/03
php
ãƒªãƒ³ã‚¯
ãã—ã ã®ã¯ã¦ãª - PHPã®è©±ã—
ã“ã†ã„ã†æµã‚Œã§ã™ã‹ï¼Ÿ 2004å¹´ï¼šPHPã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹ãŸã‚Hardened-PHP ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆé–‹å§‹ http://www.hardened-php.net/ â†“ 2006å¹´11æœˆï¼šPHP5.2ã®Filterã®ã›ã„ã§Hardened-PHPãŒä½¿ãˆãªããªã‚‹ PHPé–‹ç™ºè€…ã¯Hardened-PHPãŒã“ã‚Œã‚‰ã®ãƒ•ãƒƒã‚¯ã‚’åˆ©ç”¨ã—ã¦ã„ãŸäº‹ã‚’çŸ¥ã‚ŠãªãŒã‚‰ã€æ„å›³çš„ã«å…¥åŠ›ã‚·ã‚¹ãƒ†ãƒ ã‚’å£Šã™äº‹ã‚’æ¢ã‚ã‚ˆã†ã¨ã—ã¾ã›ã‚“ã§ã—ãŸã€‚ MOPB-17-2007:PHP ext/filter FDF Post Bypass Vulnerability â€“ yohgaki's blog â†“ 2006å¹´12æœˆï¼šå ªå¿è¢‹ã®ç·’ãŒåˆ‡ã‚ŒãŸã€‚æ€’ã£ã¦ã‚„ã‚ã‚‹ã€‚ http://wordpress.rauru-block.org/index.php/1403 â†“ 2007å¹´3æœˆï¼šPHPã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚’å…¬é–‹ã—ã¾ãã‚Šã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€å®¶ã€ã€ŒMo
c-yan 2007/06/05
php
ãƒªãƒ³ã‚¯
PHP 5.2.3ç™»å ´ - PHPãƒ¦ãƒ¼ã‚¶ã¯æ—©æ€¥ãªã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã‚’ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
The PHP development team ã¯6æœˆ1æ—¥(ç±³å›½æ™‚é–“)ã€PHP 5ç³»ã®æœ€æ–°ç‰ˆã¨ãªã‚‹PHP 5.2.3ã‚’å…¬é–‹ã—ãŸã€‚5.2.3ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¿®æ£ã¨å®‰å®šæ€§ã®æ”¹å–„ãŒå®Ÿæ–½ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã€‚5.2ã®ãƒªãƒªãƒ¼ã‚¹ã§ç”Ÿã˜ã¦ã„ãŸ2ã¤ã®ãƒªã‚°ãƒ¬ãƒƒã‚·ãƒ§ãƒ³ãƒã‚°(éžãƒ–ãƒãƒƒã‚¯SSLã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆãƒãƒ³ãƒ‰ãƒªãƒ³ã‚°ã®å•é¡Œã€ç‰¹å®šæ¡ä»¶ä¸‹ã«ãŠã‘ã‚‹HTTP_RAW_POST_DATAæ¬ å¦‚ã®å•é¡Œ)ã‚‚ä¿®æ£ã•ã‚Œã¦ã„ã‚‹ã€‚ 5.2.3ã«ãŠã‘ã‚‹ä¸»ãªå¤‰æ›´ç‚¹ã¯æ¬¡ã®ã¨ãŠã‚Šã€‚ CVE-2007-1887ã«é–¢ã™ã‚‹å•é¡Œã®ä¿®æ£ chunk_split()ã«ãŠã‘ã‚‹æ•´æ•°ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼å•é¡Œã®ä¿®æ£ imagecreatefrompngã«ãŠã‘ã‚‹ç„¡é™ãƒ«ãƒ¼ãƒ—å•é¡Œã®ä¿®æ£ ext/filterãƒ¡ãƒ¼ãƒ«ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§ã®ä¿®æ£ åŒé–‹ç™ºãƒãƒ¼ãƒ ã§ã¯ã™ã¹ã¦ã®ãƒ¦ãƒ¼ã‚¶ã«å¯¾ã—ã¦5.2.3ã¸ã®ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã‚’å¼·ãè–¦ã‚ã¦ã„ã‚‹ã€‚ä»¥å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ä½¿ã£ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ã‚„
c-yan 2007/06/02
php

security
ãƒªãƒ³ã‚¯
Yahoo! ãŒ PHP ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚’é›‡ã†æ™‚ã«èžãè³ªå•
via.Yahoo!ãŒPHP ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚’é›‡ã†æ™‚ã«èžãè³ªå• | IDEA*IDEA ã¨ã‚Šã‚ãˆãšé©å½“ã«è¨³ã—ã¦ã¿ã¾ã—ãŸã€‚é–“é•ã„ãŒã‚ã‚Œã°æŒ‡æ‘˜ã‚’ãŠé¡˜ã„ã—ã¾ã™ :-) 1.é…åˆ—usersã«ã€Œjohnã€ã‚’è¿½åŠ ã—ãªã„ã®ã¯ã©ã‚Œã‹ï¼Ÿ 1. $users[] = â€˜johnâ€™; 2. array_add($users,â€™johnâ€™); 3. array_push($users,â€˜johnâ€™); 4. $users ||= â€˜johnâ€™;2. sort(), assort(), ksort()ã®é•ã„ã‚’è¿°ã¹ã‚ˆã€‚ã¾ãŸã€ã©ã†ã„ã£ãŸçŠ¶æ³ã§åˆ©ç”¨ã™ã‚‹ã‹ã‚’è¿°ã¹ã‚ˆã€‚ 3. ä»¥ä¸‹ã®ã‚³ãƒ¼ãƒ‰ã¯ä½•ã‚’å‡ºåŠ›ã™ã‚‹ã‹ï¼Ÿãã‚Œã¯ãªãœã‹ï¼Ÿ $num = 10; function multiply(){ $num = $num * 10; } multiply(); echo $num;4. å‚ç…§ã¨é€šå¸¸ã®å¤‰æ•°ã®é•ã„ã‚’è¿°ã¹ã‚ˆã€‚ã¾ãŸã€ã©ã®ã‚ˆã†ã«å‚ç…§æ¸¡ã—ã‚’ã™
c-yan 2007/05/25
php
ãƒªãƒ³ã‚¯
ãƒ•ã‚¡ã‚¤ãƒ«ã®å…ˆé 8ãƒã‚¤ãƒˆã ã‘ã§ç”»åƒã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã‚’èª¿ã¹ã‚‹ - bits and bytes
PHPã§ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã—ãŸã¨ã $_FILES ã«ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸãƒ•ã‚¡ã‚¤ãƒ«ã«ã¤ã„ã¦ã®æƒ…å ±ãŒå…¥ã£ã¦ã„ã¾ã™ã€‚ ãã—ã¦ $_FILES[...]['type'] ã«ã¯ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸãƒ•ã‚¡ã‚¤ãƒ«ã® MIME type ãŒå…¥ã£ã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã“ã“ã«å…¥ã£ã¦ã„ã‚‹å€¤ã¯ PHP: ãƒ•ã‚¡ã‚¤ãƒ«ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã®å‡¦ç† - Manual ã« $_FILES['userfile']['type'] ãƒ•ã‚¡ã‚¤ãƒ«ã® MIME åž‹ã€‚ãŸã ã—ã€ãƒ–ãƒ©ã‚¦ã‚¶ãŒã“ã®æƒ…å ±ã‚’æä¾›ã™ã‚‹å ´åˆã€‚ ä¾‹ãˆã°ã€"image/gif" ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ã“ã® MIME åž‹ã¯ PHP å´ã§ã¯ãƒã‚§ãƒƒã‚¯ã•ã‚Œã¾ã›ã‚“ã€‚ãã®ãŸã‚ã€ ã“ã®å€¤ã¯ä¿¡ç”¨ã§ãã¾ã›ã‚“ã€‚ ã¨æ›¸ã‹ã‚Œã¦ã„ã‚‹é€šã‚Šä¿¡é ¼ã§ãã¾ã›ã‚“ã€‚ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’è¦‹ã¦ã¿ã‚‹ã¨ php-5.1.4/main/rfc1867.c ã® SAPI_API SAPI_POST_HANDLER_FUNC(rfc1867_post
c-yan 2007/05/20
php

image
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (2)

phpã«é–¢ã™ã‚‹c-yanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (2)

phpã«é–¢ã™ã‚‹c-yanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

ç±³Zend Technologiesã€Zend Framework 1.0.0ã‚’ãƒªãƒªãƒ¼ã‚¹ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«

ãã—ã ã®ã¯ã¦ãª - PHPã®è©±ã—

PHP 5.2.3ç™»å ´ - PHPãƒ¦ãƒ¼ã‚¶ã¯æ—©æ€¥ãªã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã‚’ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«

Yahoo! ãŒ PHP ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚’é›‡ã†æ™‚ã«èžãè³ªå•

ãƒ•ã‚¡ã‚¤ãƒ«ã®å…ˆé ­8ãƒã‚¤ãƒˆã ã‘ã§ç”»åƒã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã‚’èª¿ã¹ã‚‹ - bits and bytes

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (2)

phpã«é–¢ã™ã‚‹c-yanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

ç±³Zend Technologiesã€Zend Framework 1.0.0ã‚’ãƒªãƒªãƒ¼ã‚¹ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«

ãã—ã ã®ã¯ã¦ãª - PHPã®è©±ã—

PHP 5.2.3ç™»å ´ - PHPãƒ¦ãƒ¼ã‚¶ã¯æ—©æ€¥ãªã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã‚’ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«

Yahoo! ãŒ PHP ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚’é›‡ã†æ™‚ã«èžãè³ªå•

ãƒ•ã‚¡ã‚¤ãƒ«ã®å…ˆé 8ãƒã‚¤ãƒˆã ã‘ã§ç”»åƒã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã‚’èª¿ã¹ã‚‹ - bits and bytes

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹