Environment:
Operating system: Linux
Server software: nginx/1.1.16PHP/5.3.27
MySQL version: 5.5.34-log
PHPCMS program version: Phpcms V9.5.7 Release 20140625
Problem:
Local: Everything is normal in local debugging
On the server: PHPSSO communication in PHPCMS is successful, account registration and login cannot be performed, and through the tracking code, it is found that the $fp returned in the code below is empty
$fp = @fsockopen(($ip ? $ip : $host), $port, $errno, $errstr, $timeout);fsockopen function Replaced with the pfsockopen function, the return value is still empty
After searching, it was found that the fsockopen function and pfsockopen function have security issues and have been disabled by the server
Security notification announcement website: http://www.xrnet.cn/store/2012 -01-10.html
Solution:
Replace the fsockopen and pfsockopen functions with other functions, such as stream_socket_client
Examples are as follows
Before modification:
$fp = fsockopen($host, 80, $errno, $errstr, 30);or
$fp = fsockopen($host, $port, $errno, $errstr, $connection_timeout);After modification:
$fp = stream_socket_client("tcp://".$host."80", $errno, $errstr, 30);or
$fp = stream_socket_client("tcp://".$host.":".$port, $errno, $errstr, $connection_timeout);
Comments : DISCUZ communication failure may also be due to this reason!
The above introduces the inability to log in and register with PHPCMS, including the content. I hope it will be helpful to friends who are interested in PHP tutorials.

PHPidentifiesauser'ssessionusingsessioncookiesandsessionIDs.1)Whensession_start()iscalled,PHPgeneratesauniquesessionIDstoredinacookienamedPHPSESSIDontheuser'sbrowser.2)ThisIDallowsPHPtoretrievesessiondatafromtheserver.

The security of PHP sessions can be achieved through the following measures: 1. Use session_regenerate_id() to regenerate the session ID when the user logs in or is an important operation. 2. Encrypt the transmission session ID through the HTTPS protocol. 3. Use session_save_path() to specify the secure directory to store session data and set permissions correctly.

PHPsessionfilesarestoredinthedirectoryspecifiedbysession.save_path,typically/tmponUnix-likesystemsorC:\Windows\TemponWindows.Tocustomizethis:1)Usesession_save_path()tosetacustomdirectory,ensuringit'swritable;2)Verifythecustomdirectoryexistsandiswrita

ToretrievedatafromaPHPsession,startthesessionwithsession_start()andaccessvariablesinthe$_SESSIONarray.Forexample:1)Startthesession:session_start().2)Retrievedata:$username=$_SESSION['username'];echo"Welcome,".$username;.Sessionsareserver-si

The steps to build an efficient shopping cart system using sessions include: 1) Understand the definition and function of the session. The session is a server-side storage mechanism used to maintain user status across requests; 2) Implement basic session management, such as adding products to the shopping cart; 3) Expand to advanced usage, supporting product quantity management and deletion; 4) Optimize performance and security, by persisting session data and using secure session identifiers.

The article explains how to create, implement, and use interfaces in PHP, focusing on their benefits for code organization and maintainability.

The article discusses the differences between crypt() and password_hash() in PHP for password hashing, focusing on their implementation, security, and suitability for modern web applications.

Article discusses preventing Cross-Site Scripting (XSS) in PHP through input validation, output encoding, and using tools like OWASP ESAPI and HTML Purifier.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

SecLists
SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.

SublimeText3 Mac version
God-level code editing software (SublimeText3)

EditPlus Chinese cracked version
Small size, syntax highlighting, does not support code prompt function

SublimeText3 Linux new version
SublimeText3 Linux latest version

Zend Studio 13.0.1
Powerful PHP integrated development environment
