±à¼ÍƼö: |
±¾ÎÄÀ´×ÔÓÚcsdn£¬±¾ÎÄÖ÷Òª·ÖÏíWeb°²È«²âÊÔÖÐÂ߼©¶´µÄÍÚ¾ò¾Ñ飬ϣÍû¶ÔÄúµÄѧϰÓаïÖú¡£ |
|
Ò»£º¶©µ¥½ð¶îÈÎÒâÐÞ¸Ä
½âÎö
ºÜ¶àÖÐСÐ͵ĹºÎïÍøÕ¾¶¼´æÔÚÕâ¸ö©¶´¡£ÔÚÌá½»¶©µ¥µÄʱºòץȡÊý¾Ý°ü»òÕßÖ±½ÓÐÞ¸Äǰ¶Ë´úÂ룬Ȼºó¶Ô¶©µ¥µÄ½ð¶îÈÎÒâÐ޸ġ£
ÈçÏÂͼËùʾ£º


¾³£¼ûµ½µÄ²ÎÊý´ó¶àΪ
rmb
value
amount
cash
fee
money
µÈ
|
¹ØÓÚÖ§¸¶µÄÂ߼©¶´ÕâÒ»¿é»¹ÓкܶàÖÖ˼·£¬±ÈÈçÏàͬ¼Û¸ñÔö¼Ó¶©µ¥ÊýÁ¿£¬Ïàͬ¶©µ¥ÊýÁ¿¼õÉÙ²úÆ·¼Û¸ñ£¬¶©µ¥¼Û¸ñÉ趨Ϊ¸ºÊýµÈµÈ¡£
Ô¤·À˼·
1.¶©µ¥ÐèÒª¶àÖØÐ§Ñ飬ÈçÏÂͼËùÑÝʾ¡£

2. ¶©µ¥ÊýÖµ½Ï´óʱÐèÒªÈ˹¤ÉóºË¶©µ¥ÐÅÏ¢£¬ÈçÏÂͼËùÑÝʾ¡£

3. ÎÒÖ»ÊÇÌáµ½Á½¸ö·Ç³£¼òµ¥µÄÔ¤·À˼·£¬µÚ¶þ¸öÉõÖÁ»¹ÓÐһЩ²»×ãÖ®´¦¡£ÕâÀïÐèÒª¸ù¾ÝÒµÎñ»·¾³µÄ²»Í¬×ܽá³ö×Ô¼ºµÄÔ¤·À·½Ê½£¬×îºÃ×ÉѯרÃŵÄÍøÂ簲ȫ¹«Ë¾¡£
¶þ£ºÑéÖ¤Âë»Ø´«
½âÎö
Õâ¸ö©¶´Ö÷ÒªÊÇ·¢ÉúÔÚǰ¶ËÑéÖ¤´¦£¬²¢ÇÒ¾³£·¢ÉúµÄλÖÃÔÚÓÚ
Õ˺ÅÃÜÂëÕÒ»Ø
Õ˺Å×¢²á
Ö§¸¶¶©µ¥µÈ
|
ÑéÖ¤ÂëÖ÷Òª·¢ËÍ;¾¶
ÆäÔËÐлúÖÆÈçÏÂͼËùʾ£º

ºÚ¿ÍÖ»ÐèҪץȡResponseÊý¾Ý°ü±ãÖªµÀÑéÖ¤ÂëÊǶàÉÙ¡£
Ô¤·À˼·
1.responseÊý¾ÝÄÚ²»°üº¬ÑéÖ¤Â룬ÑéÖ¤·½Ê½Ö÷Òª²ÉÈ¡ºó¶ËÑéÖ¤£¬µ«ÊÇȱµãÊÇ·þÎñÆ÷µÄÔËËãѹÁ¦Ò²»áËæÖ®Ôö¼Ó¡£

2.Èç¹ûÒª½øÐÐǰ¶ËÑéÖ¤µÄ»°Ò²¿ÉÒÔ£¬µ«ÊÇÐèÒª½øÐмÓÃÜ¡£µ±È»£¬Õâ¸öÁ÷³Ìͼ»¹ÓÐһЩ°²È«È±ÏÝ£¬ÐèÒª¸ù¾Ý¹«Ë¾ÒµÎñµÄ²»Í¬¶ø½øÐиü¸Ä¡£

Èý£®Î´½øÐеǽƾ֤ÑéÖ¤
½âÎö
ÓÐЩҵÎñµÄ½Ó¿Ú£¬ÒòΪȱÉÙÁ˶ÔÓû§µÄµÇ½ƾ֤µÄЧÑé»òÕßÊÇÑéÖ¤´æÔÚȱÏÝ£¬µ¼ÖºڿͿÉÒÔδ¾ÊÚȨ·ÃÎÊÕâЩÃô¸ÐÐÅÏ¢ÉõÖÁÊÇԽȨ²Ù×÷¡£
³£¼û°¸Àý£º
1. ijµçÉ̺ǫ́Ö÷Ò³Ãæ£¬Ö±½ÓÔÚ¹ÜÀíÔ±web·¾¶ºóÃæÊäÈëmain.phpÖ®ÀàµÄ¼´¿É½øÈë¡£

2. ijº½¿Õ¹«Ë¾¶©µ¥IDö¾Ù


3. ijµç×ÓÈÏÖ¤ÖÐÐÄÃô¸ÐÎļþÏÂÔØ

4.ijվԽȨ²Ù×÷¼°È±ÏÝ£¬ÆäÖ÷ÒªÔÒòÊÇû¶ÔID²ÎÊý×öcookieÑéÖ¤µ¼Ö¡£


5. ʵ¼ÊÉÏ»¹ÓкܶసÀý£¬ÕâÀï¾Í²»Ò»Ò»Àý¾ÙÁË£¬µ«ÊÇËûÃǶ¼´æÔÚÒ»¸ö¹²Í¬µÄÌØÐÔ£¬¾ÍÊÇûÓжÔÓû§µÄµÇ½ƾ֤½øÐÐЧÑ飬ÈçÏÂͼΪÀý¡£

Ô¤·À˼·
¶ÔÃô¸ÐÊý¾Ý´æÔڵĽӿںÍÒ³Ãæ×öcookie£¬ssid£¬token»òÕ߯äËüÑéÖ¤£¬ÈçÏÂͼËùʾ¡£

ËÄ£º½Ó¿ÚÎÞÏÞÖÆÃ¶¾Ù
½âÎö
ÓÐЩ¹Ø¼üÐԵĽӿÚÒòΪûÓÐ×öÑéÖ¤»òÕ߯äËüÔ¤·À»úÖÆ£¬ÈÝÒ×Ô⵽ö¾Ù¹¥»÷¡£
³£¼û°¸Àý£º
1. ijµçÉ̵ǽ½Ó¿ÚÎÞÑéÖ¤µ¼ÖÂײ¿â

2. ijÕÐÆ¸ÍøÑéÖ¤ÂëÎÞÏÞÖÆÃ¶¾Ù

3. ij¿ìµÝ¹«Ë¾ÓÅ»Ýȯö¾Ù

4. ijµçÉÌ»áÔ±¿¨¿¨ºÅö¾Ù


5. ij³¬ÊÐ×¢²áÓû§ÐÅÏ¢»ñÈ¡


Ô¤·À˼·
1. ÔÚÊäÈë½Ó¿ÚÉèÖÃÑéÖ¤£¬Èçtoken£¬ÑéÖ¤ÂëµÈ¡£
Èç¹ûÉ趨ÑéÖ¤Â룬×îºÃ²»Òªµ¥´¿µÄ²Éȡһ¸öǰ¶ËÑéÖ¤£¬×îºÃÑ¡Ôñºó¶ËÑéÖ¤¡£
Èç¹ûÉ趨token£¬ÇëÈ·±£Ã¿¸ötokenÖ»ÄܲÉÓÃÒ»´Î£¬²¢ÇÒ¶ÔtokenÉ趨ʱ¼ä²ÎÊý¡£
2. ×¢²á½çÃæµÄ½Ó¿Ú²»Òª·µ»ØÌ«¶àÃô¸ÐÐÅÏ¢£¬ÒÔ·ÀÔâµ½ºÚ¿ÍÖÆ×÷ö¾Ù×ֵ䡣
3. ÑéÖ¤ÂëÇë²»ÒªÒÔ¶ÌÊý×ÖÀ´ÉõÖÁ£¬×îºÃÊÇÒÔ×Öĸ¼ÓÊý×Ö½øÐÐ×éºÏ£¬²¢ÇÒÑéÖ¤ÂëÐèÒªÉ趨ʱ¼äÆÚÏÞ¡£
4. ÓÅ»Ýȯ£¬VIP¿¨ºÅÇ뾡Á¿²»Òª´æÔÚ¹æÂÉÐԺͼò¶ÌÐÔ£¬²¢ÇÒÓÅ»Ýȯ×îºÃÊÇÒÔÊý×Ö¼Ó×Öĸ½øÐÐ×éºÏ¡£
5. ÒÔÉÏÕâÊDz¿·Ö¸öÈ˽¨Ò飬ʵ¼Ê·½°¸ÐèÒª²Î¿¼ÒµÎñµÄ¾ßÌåÇé¿ö¡£
Î壺cookieÉè¼Æ´æÔÚȱÏÝ
½âÎö
ÕâÀïÐèÒª¶ÔÆäÏêϸµÄ˵һÏ¡£ÎÒÃÇÏÈÒ»¸öÒ»¸öÀ´°É¡£
CookieµÄЧÑéÖµ¹ýÓÚ¼òµ¥¡£ÓÐЩweb¶ÔÓÚcookieµÄÉú³É¹ýÓÚµ¥Ò»»òÕß¼òµ¥£¬µ¼ÖºڿͿÉÒÔ¶ÔcookieµÄЧÑéÖµ½øÐÐÒ»¸öö¾Ù£¬ÈçÏÂͼËùʾ


¸ù¾ÝÉÏͼ£¬ÎÒÃÇ¿ÉÒÔ·ÖÎö³ö£¬Õâ¼ÒÍøÕ¾¶ÔÓÚcookieµÄЧÑéÖ»µ¥´¿µÄ²ÉÓÃÁËÒ»×éÊý×Ö£¬²¢ÇÒÊýֵΪ³£Á¿£¬²»»á¸Ä±ä£¬ÕâÑù·Ç³£ÈÝÒ×Ôâµ½ºÚ¿ÍµÄö¾Ù¡£ÉõÖÁÓÐÒ»Ð©ÍøÕ¾×öµÄ¸ü¼òµ¥£¬Ö±½ÓÒÔÓû§Ãû£¬ÓÊÏäºÅ»òÕßÓû§IDµÈÀ´×÷ΪcookieµÄÅжϱê×¼¡£
2. cookieÉèÖôæÔÚ±»µÁ·çÏÕ
Óкܶàʱºò£¬Èç¹ûÒ»¸öÓû§µÄcookie±»µÁÈ¡£¬¾ÍËãÓû§ÔõôÐÞ¸ÄÕ˺źÍÃÜÂ룬ÄǶÎcookieÒ»ÑùÓÐЧ¡£ÏêÇé¿ÉÒԲο¼¡¶BlackHat£¨ÊÀ½çºÚñ´ó»á£©¹Ù·½APP³öÏÖÁ½¸öÂ߼©¶´¡·¡£
ÆäÔÀíÈçÏ£º

¹úÄڴ󲿷ֳ§É̶¼²»»á°ÑÕâ¸öµØ·½µ±×÷°²È«Â©¶´À´´¦Àí£¬ËûÃÇÈÏΪÕâ¸ö©¶´µÄÀûÓÃÌõ¼þÊǺڿͱØÐëÒª´óÅúÁ¿»ñÈ¡µ½Óû§µÄcookie¡£ËäÈ»ÊÂʵÈç´Ë£¬µ«ÊÇÕâ¸öÒ²ÊÇÒ»¸ö°²È«Òþ»¼¡£
3.Óû§µÄcookieÊý¾Ý¼ÓÃÜÓ¦ÑϸñʹÓñê×¼¼ÓÃÜËã·¨£¬²¢×¢ÒâÃÜÔ¿¹ÜÀí¡£
ÓÐһЩ³§ÉÌΪÁËͼ·½±ã£¬Ã»ÓжÔÓû§µÄcookie×öÌ«¶àµÄ¼ÓÃܹ¤×÷£¬½ö½öÊǵ¥´¿µÄ×öÒ»¸ö¾²Ì¬¼ÓÃܾÍÍêÊÂÁË¡£ÎÒ֮ǰ¾ÍÅöµ½Ò»¸ö£¬¿ÉÒÔΪ´ó¼Ò»¹Ôһϵ±Ê±µÄ³¡¾°¡£

µ±Ê±ÎÒ¿´µ½cookieÖÐÓиöaccess token²ÎÊý£¬¿´µ½valueºóÃæÊÇÁ½¸öµÈºÅ£¬Ï°¹ßÐԵĸø¶ªÈ¥base64½âÂëÀïÃæ£¬·¢ÏÖ½â³öÀ´ºóÊÇÎÒµÄÓû§Ãû¡£Òò´ËÖ»ÒªÖªµÀÒ»¸öÈ˵ÄÓû§Ãû¾Í¿ÉÒÔαÔì¶Ô·½µÄcookie£¬µÇ½ËûÈËÕË»§¡£
4.»¹Óжà¸ö°¸Àý²»ÔÙ×öÖØ¸´ËµÃ÷£¬´ó¼Ò¿ÉÒÔÉîÈëÑо¿Ò»ÏÂcookieÖеÄÂ߼©¶´¡£µ«ÊÇcookieÖеÄ©¶´´ó¶à¶¼ÊÇÊôÓÚÒ»¸öԽȨ©¶´¡£Ô½È¨Â©¶´ÓÖ·ÖΪƽÐÐԽȨ£¬´¹Ö±Ô½È¨ºÍ½»²æÔ½È¨¡£
ƽÐÐԽȨ£ºÈ¨ÏÞÀàÐͲ»±ä£¬È¨ÏÞID¸Ä±ä
´¹Ö±Ô½È¨£ºÈ¨ÏÞID²»±ä£¬È¨ÏÞÀàÐ͸ıä
½»²æÔ½È¨£º¼´¸Ä±äID£¬Ò²¸Ä±äȨÏÞ
ÈçÏÂͼËùʾ£º

Ô¤·À˼·
1.cookieÖÐÉ趨¶à¸öÑéÖ¤£¬±ÈÈç×ÔÈçAPPµÄcookieÖУ¬ÐèÒªsignºÍssidÁ½¸ö²ÎÊýÅä¶Ô£¬²ÅÄÜ·µ»ØÊý¾Ý¡£
2.Óû§µÄcookieÊý¾Ý¼ÓÃÜÓ¦ÑϸñʹÓñê×¼¼ÓÃÜËã·¨£¬²¢×¢ÒâÃÜÔ¿¹ÜÀí¡£
3.Óû§µÄcookieµÄÉú³É¹ý³ÌÖÐ×îºÃ´øÈëÓû§µÄÃÜÂ룬һµ©ÃÜÂë¸Ä±ä£¬cookieµÄÖµÒ²»á¸Ä±ä¡£
4.cookieÖÐÉ趨session²ÎÊý£¬ÒÔ·Àcookie¿ÉÒÔ³¤Ê±¼äÉúЧ¡£
5.»¹Óкܶ෽·¨£¬²»ÔÙÒ»Ò»Àý¾Ù£¬Çë¸ù¾ÝÒµÎñ²»Í¬¶øË¼¿¼¡£
Áù£ºÕÒ»ØÃÜÂë´æÔÚÉè¼ÆÈ±ÏÝ
½âÎö
1.authÉè¼ÆÈ±ÏÝ
¾³£Ñо¿Â߼©¶´µÄÈË¿ÉÄÜ»á¶ÔÒÔÏÂURLºÜÊìϤ
www.xxx.com/resetpassword.php?id=MD5 |
Óû§ÐÞ¸ÄÃÜÂëʱ£¬ÓÊÏäÖлáÊÕµ½Ò»¸öº¬ÓÐauthµÄÁ´½Ó£¬ÔÚÓÐЧÆÚÄÚÓû§µã»÷Á´½Ó£¬¼´¿É½øÈëÖØÖÃÃÜÂë»·½Ú¡£¶ø´ó²¿·ÖÍøÕ¾¶ÔÓÚauthµÄÉú³É¶¼ÊDzÉÓÃrand()º¯Êý£¬ÄÇôÕâÀï¾Í´æÔÚÒ»¸öÎÊÌâÁË£¬Windows»·¾³ÏÂrand()×î´óֵΪ32768£¬ËùÒÔÕâ¸öauthµÄÖµÊÇ¿ÉÒÔ±»Ã¶¾ÙµÄ¡£
ÈçÏÂÃæÕâ¸ö´úÂë¿ÉÒÔ¶ÔauthµÄÖµ×öÒ»¸ö×ֵ䡣

È»ºóÖØÖÃij¸öÕ˺ţ¬²¢ÇÒ¶ÔÖØÖÃÁ´½ÓÄÚµÄauth½øÐÐö¾Ù

Õû¸ö©¶´µÄÔË×÷µÄÁ÷³ÌͼÈçÏ£º

2.¶Ôresponse×öÑéÖ¤
Õâ¸ö©¶´¾³£³öÏÖÔÚAPPÖУ¬ÆäÖ÷ÒªÔÒòÊǶÔÓÚÖØÖÃÃÜÂëµÄµÄÑéÖ¤ÊÇ¿´responseÊý¾Ý°ü£¬ÓÉÓÚ֮ǰµÄ°¸ÀýûÓнØÍ¼£¬Ö»ÄÜ»¸öÁ÷³Ìͼ¸ø´ó¼ÒÑÝʾһÏ¡£

3.¡¶ÃÜÂëÕÒ»ØÂ߼©¶´×ܽᡷÕâÆªÎÄÕºÜÈ«ÃæµÄ×ܽáÁËÃÜÂëÕÒ»ØÂ©¶´µÄ¼¸¸ö¾ßÌå˼·ºÍ·ÖÎö£¬ÕâÀïÎҾͲ»ÔÙ¼ÌÐø¹öÂÖ×ÓÁË¡£
Ô¤·À˼·
1.ÑϸñʹÓñê×¼¼ÓÃÜËã·¨£¬²¢×¢ÒâÃÜÔ¿¹ÜÀí¡£
2.ÔÚÖØÖÃÃÜÂëµÄÁ´½ÓÉÏÇë´øÈë¶à¸ö°²È«µÄÑéÖ¤²ÎÊý¡£
Æß£ºµ¥´¿¶ÁÈ¡ÄÚ´æÖµÊý¾ÝÀ´µ±×÷Óû§Æ¾Ö¤
½âÎö
ʵ¼ÊÉÏÕâ¸öÓ¦¸ÃËã×÷Ò»¸öÈí¼þµÄ©¶´£¬µ«ÊÇÒòΪºÍweb·þÎñÆ÷Ïà¹Ø£¬ËùÒÔÒ²µ±×÷WEBµÄÂ߼©¶´À´´¦ÀíÁË¡£×îÄܵ±×÷Àý×ÓÊÇ¡¶ÌÚѶQQ´æÔÚ¸ßΣ©¶´¿É¶ÁÈ¡²¢ÏÂÔØÈÎÒâÓû§ÀëÏßÎļþ£¨Ð¹Â©Ãô¸ÐÐÅÏ¢£©¡·Õâ¸ö©¶´£¬µ«ÊÇÎÒÏàÐÅÕâÖÖÆæÝâµÄ©¶´²»Ò»¶¨Ö»ÓÐÌÚѶ²ÅÓУ¬Ö»ÊÇ»¹Ã»ÈËÈ¥¼ì²â°ÕÁË¡£
²úÉúÕâ¸ö©¶´µÄÖ÷ÒªÔÒòÊdzÌÐòÔÚÈ·¶¨Ò»¸öÓû§µÄµÇ½ƾ֤µÄʱºòÖ÷ÒªÊÇÒÀ¿¿ÄÚ´æÖµÖеÄij¸övalueÀ´½øÐÐÈ·ÈÏ£¬¶ø²»ÊÇcookie¡£µ«ÊÇÄÚ´æÖµÊÇ¿ÉÒÔ¸ü¸ÄºÍ²é¿´µÄ¡£ÆäÁ÷³ÌͼÈçÏ£º

Ô¤·À˼·
1. ×ß·þÎñÆ÷¶ËµÄÊý¾Ý×îºÃ×öcookieÑéÖ¤¡£
2. ÎÒ²»·´¶ÔÖ±½ÓÔÚ½ø³ÌÖÐÈ·¶¨Óû§µÄµÇ½ƾ֤£¬µ«ÊÇÇë¶Ô½ø³Ì½øÐб£»¤£¬»òÕß¶Ô½ø³ÌÖеÄvalue×ö¼ÓÃÜ´¦Àí¡£
×ܽá
ÒÔÉϼûµ½µÄÖ»ÊǼ¸¸ö±È½Ï¾µäµÄºÍ³£¼ûµÄÂ߼©¶´£¬ÕâЩÂ߼©¶´Ò²ÊdzÌÐò¿ª·¢ÈËÔ±ºÍ°²È«¼ì²âÈËÔ±ÐèÒªÁôÒâµÄ¡£
|