php - Why is a public writable directory vulnerable? -


बस सामान के साथ प्रयोग करना:)

मैंने एक नई निर्देशिका बनाई और chmod 777 (इसे सार्वजनिक रूप से बनाया लिखने योग्य)

अब मान लीजिए मेरे पास सर्वर तक पहुंच नहीं है, जहां यह निर्देशिका है मैंने निम्नलिखित की कोशिश की:

  1. file_put_content ('', "मेरी नई फ़ाइल फ़ाइल सामग्री"); (मैं एक PHP उपयोगकर्ता हूं)। // काम नहीं किया जैसा कि HTTP आवरण समर्थित नहीं है।

  2. मैंने जावास्क्रिप्ट को उसी लिखने योग्य फ़ाइल में अपलोड करने के लिए इस्तेमाल किया मुझे एक कॉरस त्रुटि मिलती है।

अब जब मैं इस फ़ाइल को इस सार्वजनिक लिखने योग्य निर्देशिका में अपलोड नहीं कर सका क्या कोई बता सकता है कि किस तरह से सार्वजनिक लिखने योग्य निर्देशिकाओं का दुरुपयोग किया जा सकता है?


Comments

Post a Comment

Popular posts from this blog

python - rpy2 import is not working -

When I try to import rpy2, I get an error. Here is the code and error & gt; & Gt; & Gt; Import Traceback (Most Recent Call Final): File "C: \ PF \ WinPython-64bit-3.3.3.3 \ python-3.3.3.amd64 \ lib \ site-packages \ IPython \ core \ interactiveshell.py", line 2828 In the file, "ipython-input-148-c258a0f70d44" gt; Row 1, & lt; modules & gt; Import pandas.rpy.common file in runcode ajl (code_obj, self.user_global_ns, self.user_ns) file " C: \ PF \ WinPython-64bit-3.3.3.3 \ python-3.3.3.amd64 \ lib \ site-packages \ pandas \ rpy \ common.py ", line 14, in & lt; modules & gt; Rpy2.robjects .packages Import Import Import Import: A module name 'rpy2' What could be the problem? I Python Version 3.3.3 and PANDAS Version 0.13.1 Edit Tried to install rpy2 separately I get an error using python setup.py install which is not the module popen3 in OS . Running the site of Christophe Gohalke properly insta...
Read more

javascript - How to get MySQL query result returned using $.ajax -

I'm trying to update is a JavaScript, when you hover over an image, a devi Floats near your mouse, this information is stored in an .js file as an array, for example. text [0] = ["image 1", "data1"] text [1] = ["image2", "data2"] In the past, if the array change / add / delete the data it will need to upload a new copy .js file, if the data was attached / deleted, then the new image needs a change in .dwt file Which can update each file using the .dwt file as the main template, which can result in 20+ pages They are uploaded I thought that I can automate this record by using the database and using the database if they are active and use only mysql queries which are active, such a black app The database can be added and disabled, thus eliminating the need for every soft upload of the file. To do this, I had planned to store the information in the database and create the above array based on the results, by researching how to us...
Read more

javascript - How to use the code plugin with popcornjs -

I'm making my first move with popcornes and I'm trying to use it, but to make sure Not to do this I gave an example, and found the video to play, but I can not use the plugin index.html: & lt; Script src = "bower_components / popcornjs / popcorn.js" & gt; & Lt; / Script & gt; & Lt; Script src = "bower_components / popcornjs / wrappers / common / popcorn.mediaElementProto.js" & gt; & Lt; / Script & gt; & Lt; Script src = "bower_components / popcornjs / wrappers / youtube / popcorn.HTMLYouTubeVideoElement.js" & gt; & Lt; / Script & gt; & Lt; Script src = "bower_components / popcornjs / plugins / code / popcorn.code.js" & gt; & Lt; / Script & gt; Media.js $ scope.player = popcorn.HTMLYouTubeVideoElement ("#media-player"); $ Scope.player src = "http://www.youtube.com/watch?v=DaN2Y2-wNSs"; // The following lines failed // $ scope.player.c...
Read more