admin.php3 $program_name Version: $ver $admin_name:
INCLUDE("layout.inc.php3");
INCLUDE("config.inc.php3");
INCLUDE("./lang/$language.inc.php3");
print_header("$admin_name");
print_navbar();
$string=implode($argv," ");
$string2=explode("&",$string);
if($string==’’)
{
echo"
Administration:
.php3?admin">
$admin_username:
$admin_password:
$send">
";
}
else if($string==’admin’)
{
if($adminuser1==$adminuser)
{
if($adminpass1==$adminpass)
{
echo"
admin.php3?send&$adminuser1&$adminpass1">$send_mail
admin.php3?users&$adminuser1&$adminpass1">$show_users
admin.php3?delall&$adminuser1&$adminpass1">$del_table
tablecreator.php3">$create_table
";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’delall’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
$query="DROP TABLE $maillist_table";
mysql_db_query($database_name,$query,$conn) or die("$cant_del_table");
echo"$table_deleted";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’users’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
echo"
$headline_users
";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’deluser’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
$query="DELETE FROM $maillist_table WHERE email=’$string2[3]’";
mysql_db_query($database_name,$query,$conn) or die("$string2[3] $could_not_be_deleted");
echo"$string2[3] has_been_deleted";
}
else { echo"$noaccess"; }
}
else { echo"$noaccess"; }
}
else if($string2[0]==’send’)
{
if($string2[1]==$adminuser)
{
if($string2[2]==$adminpass)
{
echo"
$send_mail:
?>
english.inc.php3
$mailadd_text="If you are in our Newsletter, you get an E-Mail with Informations
about our Homepage every month. Just fill in the following Form.
to unsubscribe click";
$remember_pass="Please remember your Password, otherwise, you can’t delete your mailadress from
the list";
$wrong_mail="You’ve entered a bad E-Mail adress";
$admin_name="Newsletter Administration";
$program_name="Newsletter-Manager";
$admin_username="Admin-Username";
$admin_password="Admin-Password";
$send="submit";
$reset="reset";
$noaccess="access denied";
$send_mail="Send a Mail to the list";
$show_users="Show/delete members";
$del_table="Delete Table $maillist_table";
$create_table="Create Table $maillist_table";
$cant_del_table="Can’t delete Table $maillist_table";
$table_deleted="Table $maillist_table has been deleted";
$headline_users="Every user on one place:";
$prename="Prename";
$database_error="Error on Database: $database_name";
$delete="delete";
$could_not_be_deleted="could not be deleted";
$has_been_deleted="has been deleted";
$topic="Topic";
$message="Message";
$send_error="send error";
$xxx_has_been_sent="The following has been sent";
$already_there="You are already in the list!!!";
$xxx_has_been_entered="The following has been entered";
$password="Password";
$cant_find_entry="Can’t find entry!";
$isnt_in_db="$email is not entered in the Database";
$error_del="Error while trying to delete";
$entry_del="Entry has been deleted";
$here="HERE";
$click="";
$all_fields_must_be_edited="ERROR! All Fields have to be filled in completely!";
?>
tablecreator.php3
INCLUDE"layout.inc.php3";
INCLUDE"config.inc.php3";
print_header("Create table $maillist_table");
print_navbar();
$query="CREATE TABLE $maillist_table
(name CHAR (50) not null , vorname CHAR (50) not null ,
email CHAR (255) not null , pass CHAR (10) not null ,
PRIMARY KEY (email), INDEX (email), UNIQUE (email))";
mysql_db_query($database_name,$query,$conn) or die("Could not create table");
echo"Table "$maillist_table" has been created";
print_back();
print_footer();
?>
index.php3
/******************************************************************************/
/* */
/* Mailinglisten-Manager */
/* */
/* by: Marcel Beerta */
/* http://www.supertown.de/computer/mazen/ */
/* marcel.beerta@gmx.net */
/* */
/******************************************************************************/
INCLUDE "config.inc.php3";
INCLUDE "./lang/$language.inc.php3";
INCLUDE "layout.inc.php3";
print_header("$program_name");
print_navbar();
$string=implode($argv," ");
if ($string==’add’)
{
if($name&&$prename&&$email&&$pw)
{
$query="INSERT INTO $maillist_table(name,vorname,email,pass)
VALUES(’$name’,’$vorname’,’$email’,’$pw’)";
mysql_db_query($database_name,$query,$conn) or die("$already_there");
echo"
$xxx_has_been_entered
Name: $name
$prename: $vorname
E-Mail: $email
$password: $pw
$remember_pass
";
}
else
{
echo"$all_fields_must_be_edited";
}
}
else if($string==’delete’)
{
echo"
.php3?delme">
E-Mail:
$password:
$send">
";
}
else if($string==’delme’)
{
$query1="SELECT * FROM $maillist_table WHERE $maillist_table.email LIKE ’$email’";
$result=mysql_db_query($database_name,$query1,$conn) or die("$cant_find_entry");
$data=mysql_fetch_row($result) or die("$isnt_in_db
");
if($data[3]==$pw)
{
$query="DELETE FROM $maillist_table WHERE email=’$email’";
mysql_db_query($database_name,$query,$conn) or die("$error_del");
echo"$entry_del";
}
else
{
echo"$noaccess";
}
}
else
{
echo"$mailadd_text
index.php3?delete">$here $click ...
";
}
print_back();
print_footer();
?>
layout.inc.php3
/******************************************************************************/
/* */
/* Layout Datei ... */
/* */
/* Einfach auf eigene Layout-Wuensche anpassen ... */
/* */
/* by Marcel Beerta */
/* http://www.supertown.de/computer/mazen/ */
/* */
/******************************************************************************/
function print_header ($title)
{
echo"
Content-Type" content="text/html; charset=ISO-8859-1">
description"
content="">
keywords"
content="">
distribution" content="global">
robots" content="index">
robots" content="follow">
revisit-after" CONTENT="1 days">
language" content="">
author" content="">
copyright" content="">
programmer" content="Marcel Beerta (www.game-center.de)">
0" leftmargin="0" bgColor=#040732 link=#ffc600 text=#ffffff vLink=#ffc600
style="font-family: Verdana; color: #FFFFFF">";
}
function print_navbar ( )
{
echo"
";
}
function print_footer ( )
{
echo"
";
}
function print_back ( )
{
echo"
";
}
?>
config.inc.php3
/*****************************************************************************/
/* */
/* Datenbank-Connector */
/* Marcel Beerta */
/* http://www.supertown.de/mazen/maillist */
/*****************************************************************************/
/**************************************/
/* Just edit the following few lines: */
/**************************************/
//Admin-username:
$adminuser=’szw’;
//Admin-password:
$adminpass=’szw’;
//language
$language=’english’; //other Languages: ’german’,’english’
//The Hostname of the MySQL-Server
$hostname = ’localhost’;
//MySQL-Server username
$user = ’root’;
//MySQL-Server password
$pass = ’’;
//Database-Name
$database_name = ’maillist’;
//Maillinglist-Table
$maillist_table=’marcel_maillist’;
//From-E-Mail
$from=’sszw@163.net’;
//Reply-To-E-Mail
$reply=’sszw@163.net’;
//X-Mailer
$mailer=’PHP-Maillist by Mazen’;
/************************************************/
/* Don’t edit this, if you don’t know, what you */
/* do... */
/************************************************/
$conn=mysql_pconnect ($hostname,$user,$pass);
$ver="1.0.0";
?&g

phpientifiesauser'ssessionusessessionSessionCookiesAndSessionIds.1)whiwSession_start()被称为,phpgeneratesainiquesesesessionIdStoredInacookInAcookInamedInAcienamedphpsessidontheuser'sbrowser'sbrowser.2)thisIdAllowSphptptpptpptpptpptortoreTessessionDataAfromtheserverMtheserver。

PHP会话的安全可以通过以下措施实现:1.使用session_regenerate_id()在用户登录或重要操作时重新生成会话ID。2.通过HTTPS协议加密传输会话ID。3.使用session_save_path()指定安全目录存储会话数据,并正确设置权限。

phpsessionFilesArestoredIntheDirectorySpecifiedBysession.save_path,通常是/tmponunix-likesystemsorc:\ windows \ windows \ temponwindows.tocustomizethis:tocustomizEthis:1)useession_save_save_save_path_path()

ToretrievedatafromaPHPsession,startthesessionwithsession_start()andaccessvariablesinthe$_SESSIONarray.Forexample:1)Startthesession:session_start().2)Retrievedata:$username=$_SESSION['username'];echo"Welcome,".$username;.Sessionsareserver-si

利用会话构建高效购物车系统的步骤包括:1)理解会话的定义与作用,会话是服务器端的存储机制,用于跨请求维护用户状态;2)实现基本的会话管理,如添加商品到购物车;3)扩展到高级用法,支持商品数量管理和删除;4)优化性能和安全性,通过持久化会话数据和使用安全的会话标识符。

本文讨论了PHP中的crypt()和password_hash()之间的差异,以进行密码哈希,重点介绍其实施,安全性和对现代Web应用程序的适用性。

文章讨论了通过输入验证,输出编码以及使用OWASP ESAPI和HTML净化器之类的工具来防止PHP中的跨站点脚本(XSS)。


热AI工具

Undresser.AI Undress
人工智能驱动的应用程序,用于创建逼真的裸体照片

AI Clothes Remover
用于从照片中去除衣服的在线人工智能工具。

Undress AI Tool
免费脱衣服图片

Clothoff.io
AI脱衣机

Video Face Swap
使用我们完全免费的人工智能换脸工具轻松在任何视频中换脸!

热门文章

热工具

VSCode Windows 64位 下载
微软推出的免费、功能强大的一款IDE编辑器

SecLists
SecLists是最终安全测试人员的伙伴。它是一个包含各种类型列表的集合,这些列表在安全评估过程中经常使用,都在一个地方。SecLists通过方便地提供安全测试人员可能需要的所有列表,帮助提高安全测试的效率和生产力。列表类型包括用户名、密码、URL、模糊测试有效载荷、敏感数据模式、Web shell等等。测试人员只需将此存储库拉到新的测试机上,他就可以访问到所需的每种类型的列表。

DVWA
Damn Vulnerable Web App (DVWA) 是一个PHP/MySQL的Web应用程序,非常容易受到攻击。它的主要目标是成为安全专业人员在合法环境中测试自己的技能和工具的辅助工具,帮助Web开发人员更好地理解保护Web应用程序的过程,并帮助教师/学生在课堂环境中教授/学习Web应用程序安全。DVWA的目标是通过简单直接的界面练习一些最常见的Web漏洞,难度各不相同。请注意,该软件中

SublimeText3汉化版
中文版,非常好用

安全考试浏览器
Safe Exam Browser是一个安全的浏览器环境,用于安全地进行在线考试。该软件将任何计算机变成一个安全的工作站。它控制对任何实用工具的访问,并防止学生使用未经授权的资源。