admin.php3 $program_name Version: $ver $admin_name:
INCLUDE("layout.inc.php3");
INCLUDE("config.inc.php3");
INCLUDE("./lang/$language.inc.php3");
print_header("$admin_name");
print_navbar();
$string=implode($argv," ");
$string2=explode("&",$string);
if($string==’’)
{
echo"
Administration:
.php3?admin">
$admin_username:
$admin_password:
$send">
";
}
else if($string==’admin’)
{
if($adminuser1==$adminuser)
{
if($adminpass1==$adminpass)
{
echo"
admin.php3?send&$adminuser1&$adminpass1">$send_mail
admin.php3?users&$adminuser1&$adminpass1">$show_users
admin.php3?delall&$adminuser1&$adminpass1">$del_table
tablecreator.php3">$create_table
";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’delall’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
$query="DROP TABLE $maillist_table";
mysql_db_query($database_name,$query,$conn) or die("$cant_del_table");
echo"$table_deleted";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’users’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
echo"
$headline_users
";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’deluser’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
$query="DELETE FROM $maillist_table WHERE email=’$string2[3]’";
mysql_db_query($database_name,$query,$conn) or die("$string2[3] $could_not_be_deleted");
echo"$string2[3] has_been_deleted";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’send’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
echo"
$send_mail:
?>
english.inc.php3
$mailadd_text="If you are in our Newsletter, you get an E-Mail with Informations
about our Homepage every month. Just fill in the following Form.
to unsubscribe click";
$remember_pass="Please remember your Password, otherwise, you can’t delete your mailadress from
the list";
$wrong_mail="You’ve entered a bad E-Mail adress";
$admin_name="Newsletter Administration";
$program_name="Newsletter-Manager";
$admin_username="Admin-Username";
$admin_password="Admin-Password";
$send="submit";
$reset="reset";
$noaccess="access denied";
$send_mail="Send a Mail to the list";
$show_users="Show/delete members";
$del_table="Delete Table $maillist_table";
$create_table="Create Table $maillist_table";
$cant_del_table="Can’t delete Table $maillist_table";
$table_deleted="Table $maillist_table has been deleted";
$headline_users="Every user on one place:";
$prename="Prename";
$database_error="Error on Database: $database_name";
$delete="delete";
$could_not_be_deleted="could not be deleted";
$has_been_deleted="has been deleted";
$topic="Topic";
$message="Message";
$send_error="send error";
$xxx_has_been_sent="The following has been sent";
$already_there="You are already in the list!!!";
$xxx_has_been_entered="The following has been entered";
$password="Password";
$cant_find_entry="Can’t find entry!";
$isnt_in_db="$email is not entered in the Database";
$error_del="Error while trying to delete";
$entry_del="Entry has been deleted";
$here="HERE";
$click="";
$all_fields_must_be_edited="ERROR! All Fields have to be filled in completely!";
?>
tablecreator.php3
INCLUDE"layout.inc.php3";
INCLUDE"config.inc.php3";
print_header("Create table $maillist_table");
print_navbar();
$query="CREATE TABLE $maillist_table
(name CHAR (50) not null , vorname CHAR (50) not null ,
email CHAR (255) not null , pass CHAR (10) not null ,
PRIMARY KEY (email), INDEX (email), UNIQUE (email))";
mysql_db_query($database_name,$query,$conn) or die("Could not create table");
echo"Table "$maillist_table" has been created";
print_back();
print_footer();
?>
index.php3
/******************************************************************************/
/* */
/* Mailinglisten-Manager */
/* */
/* by: Marcel Beerta */
/* http://www.supertown.de/computer/mazen/ */
/* marcel.beerta@gmx.net */
/* */
/******************************************************************************/
INCLUDE "config.inc.php3";
INCLUDE "./lang/$language.inc.php3";
INCLUDE "layout.inc.php3";
print_header("$program_name");
print_navbar();
$string=implode($argv," ");
if ($string==’add’)
{
if($name&&$prename&&$email&&$pw)
{
$query="INSERT INTO $maillist_table(name,vorname,email,pass)
VALUES(’$name’,’$vorname’,’$email’,’$pw’)";
mysql_db_query($database_name,$query,$conn) or die("$already_there");
echo"
$xxx_has_been_entered
Name: $name
$prename: $vorname
E-Mail: $email
$password: $pw
$remember_pass
";
}
else
{
echo"$all_fields_must_be_edited";
}
}
else if($string==’delete’)
{
echo"
.php3?delme">
E-Mail:
$password:
$send">
";
}
else if($string==’delme’)
{
$query1="SELECT * FROM $maillist_table WHERE $maillist_table.email LIKE ’$email’";
$result=mysql_db_query($database_name,$query1,$conn) or die("$cant_find_entry");
$data=mysql_fetch_row($result) or die("$isnt_in_db
");
if($data[3]==$pw)
{
$query="DELETE FROM $maillist_table WHERE email=’$email’";
mysql_db_query($database_name,$query,$conn) or die("$error_del");
echo"$entry_del";
}
else
{
echo"$noaccess";
}
}
else
{
echo"$mailadd_text
index.php3?delete">$here $click ...
";
}
print_back();
print_footer();
?>
layout.inc.php3
/******************************************************************************/
/* */
/* Layout Datei ... */
/* */
/* Einfach auf eigene Layout-Wuensche anpassen ... */
/* */
/* by Marcel Beerta */
/* http://www.supertown.de/computer/mazen/ */
/* */
/******************************************************************************/
function print_header ($title)
{
echo"
Content-Type" content="text/html; charset=ISO-8859-1">
description"
content="">
keywords"
content="">
distribution" content="global">
robots" content="index">
robots" content="follow">
revisit-after" CONTENT="1 days">
language" content="">
author" content="">
copyright" content="">
programmer" content="Marcel Beerta (www.game-center.de)">
0" leftmargin="0" bgColor=#040732 link=#ffc600 text=#ffffff vLink=#ffc600
style="font-family: Verdana; color: #FFFFFF">";
}
function print_navbar ( )
{
echo"
";
}
function print_footer ( )
{
echo"
";
}
function print_back ( )
{
echo"
";
}
?>
config.inc.php3
/*****************************************************************************/
/* */
/* Datenbank-Connector */
/* Marcel Beerta */
/* http://www.supertown.de/mazen/maillist */
/*****************************************************************************/
/**************************************/
/* Just edit the following few lines: */
/**************************************/
//Admin-username:
$adminuser=’szw’;
//Admin-password:
$adminpass=’szw’;
//language
$language=’english’; //other Languages: ’german’,’english’
//The Hostname of the MySQL-Server
$hostname = ’localhost’;
//MySQL-Server username
$user = ’root’;
//MySQL-Server password
$pass = ’’;
//Database-Name
$database_name = ’maillist’;
//Maillinglist-Table
$maillist_table=’marcel_maillist’;
//From-E-Mail
$from=’sszw@163.net’;
//Reply-To-E-Mail
$reply=’sszw@163.net’;
//X-Mailer
$mailer=’PHP-Maillist by Mazen’;
/************************************************/
/* Don’t edit this, if you don’t know, what you */
/* do... */
/************************************************/
$conn=mysql_pconnect ($hostname,$user,$pass);
$ver="1.0.0";
?&g

tostartaphpsession,usesesses_start()attheScript'Sbeginning.1)placeitbeforeanyOutputtosetThesessionCookie.2)useSessionsforuserDatalikeloginstatusorshoppingcarts.3)regenerateSessiveIdStopreventFentfixationAttacks.s.4)考慮使用AttActAcks.s.s.4)

會話再生是指在用戶進行敏感操作時生成新會話ID並使舊ID失效,以防會話固定攻擊。實現步驟包括:1.檢測敏感操作,2.生成新會話ID,3.銷毀舊會話ID,4.更新用戶端會話信息。

PHP会话对应用性能有显著影响。优化方法包括:1.使用数据库存储会话数据,提升响应速度;2.减少会话数据使用,只存储必要信息;3.采用非阻塞会话处理器,提高并发能力;4.调整会话过期时间,平衡用户体验和服务器负担;5.使用持久会话,减少数据读写次数。

PHPsessionsareserver-side,whilecookiesareclient-side.1)Sessionsstoredataontheserver,aremoresecure,andhandlelargerdata.2)Cookiesstoredataontheclient,arelesssecure,andlimitedinsize.Usesessionsforsensitivedataandcookiesfornon-sensitive,client-sidedata.

phpIdentifiesauser'ssessionSessionSessionCookiesAndSessionId.1)whiwsession_start()被稱為,phpgeneratesainiquesesesessionIdStoredInacookInAcookInAcienamedInAcienamedphpsessIdontheuser'sbrowser'sbrowser.2)thisIdallowSphptpptpptpptpptpptpptpptoretoreteretrieetrieetrieetrieetrieetrieetreetrieetrieetrieetrieetremthafromtheserver。

PHP會話的安全可以通過以下措施實現:1.使用session_regenerate_id()在用戶登錄或重要操作時重新生成會話ID。 2.通過HTTPS協議加密傳輸會話ID。 3.使用session_save_path()指定安全目錄存儲會話數據,並正確設置權限。

phpsessionFilesArestoredIntheDirectorySpecifiedBysession.save_path,通常是/tmponunix-likesystemsorc:\ windows \ windows \ temponwindows.tocustomizethis:tocustomizEthis:1)useession_save_save_save_path_path()


熱AI工具

Undresser.AI Undress
人工智慧驅動的應用程序,用於創建逼真的裸體照片

AI Clothes Remover
用於從照片中去除衣服的線上人工智慧工具。

Undress AI Tool
免費脫衣圖片

Clothoff.io
AI脫衣器

Video Face Swap
使用我們完全免費的人工智慧換臉工具,輕鬆在任何影片中換臉!

熱門文章

熱工具

禪工作室 13.0.1
強大的PHP整合開發環境

MantisBT
Mantis是一個易於部署的基於Web的缺陷追蹤工具,用於幫助產品缺陷追蹤。它需要PHP、MySQL和一個Web伺服器。請查看我們的演示和託管服務。

SublimeText3漢化版
中文版,非常好用

SublimeText3 Linux新版
SublimeText3 Linux最新版

SecLists
SecLists是最終安全測試人員的伙伴。它是一個包含各種類型清單的集合,這些清單在安全評估過程中經常使用,而且都在一個地方。 SecLists透過方便地提供安全測試人員可能需要的所有列表,幫助提高安全測試的效率和生產力。清單類型包括使用者名稱、密碼、URL、模糊測試有效載荷、敏感資料模式、Web shell等等。測試人員只需將此儲存庫拉到新的測試機上,他就可以存取所需的每種類型的清單。