13. $_SERVER['PHP_SELF']ã¨XSS脆弱性皆ã•ã‚“ã¯åŒã˜ã‚¹ã‚¯ãƒªãƒ—トã¸ã®ãƒªãƒ³ã‚¯ã‚’貼る時ã€ã©ã®æ§˜ã«è¨˜è¿°ã—ã¦ã„ã¾ã™ã‹ï¼Ÿ $_SERVER['PHP_SELF']を用ã„ã‚‹ã“ã¨ãŒã‚ã‚‹ã®ã§ã¯ãªã„ã§ã—ょã†ã‹ã€‚ã“れを直接用 ã„ã‚‹ã“ã¨ã¯å±é™ºã§ã™ã€‚ãªãœãªã‚‰ã°ã€$_SERVER['PHP_SELF']ã«ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ クリプティング（XSS）脆弱性ãŒå˜åœ¨ã™ã‚‹ã‹ã‚‰ã§ã™ã€‚ $_SERVER['PHP_SELF']ã¯ã—ã°ã—ã°æ¬¡ã®ã‚ˆã†ã«ä½¿ã‚ã‚Œã¾ã™ã€‚ <form method="post" action="<?php echo $_SERVER['PHP_SELF'] ?>"> ã“ã®ãƒšãƒ¼ã‚¸ï¼ˆã“ã“ã§ã¯http:/www.example.jp/example.php）ã¸ä¸‹è¨˜ã®æ§˜ã«ãƒªãƒ³ã‚¯ を貼りã€ã‚¯ãƒªãƒƒã‚¯ã—ã¦ã¿ã¦ä¸‹ã•ã„。 <a href="http://www.example.jp/ example.php/%22%3E%3Cscript%3Ealert(%27XS
![13. $_SERVER['PHP_SELF']ã¨XSS脆弱性](https://cdn-ak-scissors.b.st-hatena.com/image/square/bed39b5962a5d552c95b6d796db8f55e72d32943/height=288;version=1;width=512/https%3A%2F%2Fxtech.nikkei.com%2Fimages%2Fn%2Fxtech%2F2020%2Fogp_nikkeixtech_hexagon.jpg%3F20220512)
$_SERVER['PHP_SELF']ã¯å±é™ºï¼Ÿ - [PHP + PHP] ãºã‚“ãŸã‚“ info
{{#tags}}- {{label}}
{{/tags}}