php - Why is a public writable directory vulnerable? -


बस सामान के साथ प्रयोग करना:)

मैंने एक नई निर्देशिका बनाई और chmod 777 (इसे सार्वजनिक रूप से बनाया लिखने योग्य)

अब मान लीजिए मेरे पास सर्वर तक पहुंच नहीं है, जहां यह निर्देशिका है मैंने निम्नलिखित की कोशिश की:

  1. file_put_content ('', "मेरी नई फ़ाइल फ़ाइल सामग्री"); (मैं एक PHP उपयोगकर्ता हूं)। // काम नहीं किया जैसा कि HTTP आवरण समर्थित नहीं है।

  2. मैंने जावास्क्रिप्ट को उसी लिखने योग्य फ़ाइल में अपलोड करने के लिए इस्तेमाल किया मुझे एक कॉरस त्रुटि मिलती है।

अब जब मैं इस फ़ाइल को इस सार्वजनिक लिखने योग्य निर्देशिका में अपलोड नहीं कर सका क्या कोई बता सकता है कि किस तरह से सार्वजनिक लिखने योग्य निर्देशिकाओं का दुरुपयोग किया जा सकता है?


Comments

Post a Comment

Popular posts from this blog

ios - How do I use CFArrayRef in Swift? -

I am using Objective-class in my Swift Project through a bridging header. The method signature looks like this: - Some cement (some type) some parameters; I started by getting an example of class, calling method, and storing the value: var myInstance = MyClassWithThatMethod (); Var cfArr = myInstance.someMethod (some value); Then try to get the value in the array: var valueInArrayThatIWant = CFArrayGetValueAtIndex (cfArr, 0); However, I get the error unmanaged & lt; Cfarray & gt; Not like 'CFArray' . Unmanaged & lt; Cfarray & gt; also means? I looked, but I do not need to change the array in a fast array (though it would be good). I need to be able to get value from the array. I also tried CFArray method to pass in a function: func doSomeStuffOnArray (myArray: NSArray) {} Although I get the same error when using: doSomeStuffOnArray (cfArr); // unmanaged & lt; CFArray & gt; I am using CFArray because I want to sto...
Read more

scala - Play Framework - how to bind form to a session field -

Is there any way, I can get some parameters from the header, cookies (log in userId in my case) , And then apply it in a form which I know who will deposit the ticket? SupportForm supportForm: form [supportTicket] = form (mapping ("question" -> text, "priority" -> text) (apply support ticket. (HelpText.update) What are the good practices here? What is the call to apply the request, when I can use it (and also a good practice?) Edit An issue, absolutely deceiving anyone if I were to create a hidden area with this value. It could Ript, but the issue may be re-used in any way to verify and return the form, it can not be sure how it ....
Read more

eclipse plugin - Run java code error: Workspace is closed -

To create an automated project, I created a plug-in project with the following dependencies: Org.eclipse.core.resources org.eclipse.equinox.registry org.eclipse.core.runtime and the following The Java class is located in the src folder: Package Examiner; Import org.eclipse.core.resources.IProject; Import org.eclipse.core.resources.IWorkspaceRoot; Import org.eclipse.core.resources.ResourcesPlugin; Import org.eclipse.core.runtime.CoreException; Import org.eclipse.core.runtime.IProgressMonitor; Import org.eclipse.core.runtime.NullProgressMonitor; Public class tes {public static zero main (string [] args) {// TODO auto generated method stub IProgressMonitor progress monitor = new NullProgressMonitor (); IWorkspaceRoot root = ResourcesPlugin.getWorkspace (). GetRoot (); Ipoject project = root.jetproject ("desired projectname"); Try {Project.create (progress monitor); Project.open (progressMonitor); } Grip (CoreException E) {// TODO Auto generated blocking block e....
Read more