1~判断注入点~ ：’;and 1=1;and 1=2                        -------（

[阅读全文]

文章作者：mika
信息来源：邪恶八进制信息安全团队（www.eviloctal.com）

mysql出来5版本以后，注入漏洞要比以前更容易利用了，也可以像mssql那样直接暴取了（甚至比mssql更容易了，因为mssql暴取是需要错误提示开启的，如果错误提示关闭的话，是需要暴力猜解的，而mysql的只要你找准注入点只要可以union出任何一个字段能在页面显示出来就可以了）。自从读了flyh4t的文

[阅读全文]

一  前言    问题的存在

    从代码级别上，也就是应用层次上考虑代码安全的话（也就是不考虑底层的语言本身等问题的漏洞），脚本安全问题就是函数和变量的问题。变量直接或者间接的接收用户不安全的的输入，由于php本身的特性，在php中更容易发现这种变量的混乱（很多php程序都用来定义以及初始化以及接收变量，可以直接在程序中使用$

[阅读全文]

Features include:
100% Absolutely Free
yourchoice.599megs.com
Access to Community Features
24/7 Full FTP Access
599 Megabytes of Storage
3 Gigabytes of Bandwidth
Easy to use Control Panel
Support by Forums
PHP and MySQL Database!
Don't Wait Sign up Now!


申请地址：http://www.599megs.com/ipanel/order/

Absolutely FREE
No setup fee
Data storage: 250 MB
Monthly bandwidth: 5 GB
Customer Support
Free 24/7 technical support
Detailed video tutorials
Extensive documentation
Integrated ticketing system
Response time: 24 hours

Domains and Subdomains
Hosting for 1 domain
5 subdomains

Free Features
Elefante free scripts (?)
FrontPage Extensions

Site Statistics
Detailed bandwidth stats
E-mail Features
3 POP3 accounts
3 Email aliases
SpamAssassin protection
E-mail filters
Webmail service
POP3 access/no SMTP
"Catch-all" e-mails

Scripting and Database
1 MySQL database
10 MB MySQL DB space
Perl enabled
PHP enabled
PHPMyAdmin
Over 3,000 Perl modules

Site Management Tools
Advanced Control Panel
Multi-lingual control panel
1 FTP account
Web-based file manager

Misc Features
Instant account activation
SSL with certificate gen
SSI (Server Side Includes)
RAID secured data storage
Easy upgrade options

OS and Backup
Stable Linux with Apache
UPS & diesel generator

Server and Connection
Dual P4 XEON 2.8/1GB RAM
2x160GB HDDs in RAID
100 MBits conn. per server
320 GBits data center conn.
99.9% uptime guarantee


申请地址:http://freehostia.com/free_hosting.html

申请地址 http://my-place.us/
演示地址 http://popphen.my-place.us/