Downloads
Documentation
Get Involved
Help
Search docs
Informational advisory: Session upload progress
Getting Started
Introduction
A simple tutorial
Language Reference
Basic syntax
Types
Variables
Constants
Expressions
Operators
Control Structures
Functions
Classes and Objects
Namespaces
Enumerations
Error Handling
Fibers
Generators
Attributes
References Explained
Predefined Variables
Predefined Exceptions
Predefined Interfaces and Classes
Predefined Attributes
Context options and parameters
Supported Protocols and Wrappers
Security
Introduction
General considerations
Installed as CGI binary
Installed as an Apache module
Session Security
Filesystem Security
Database Security
Error Reporting
User Submitted Data
Hiding PHP
Keeping Current
Features
HTTP authentication with PHP
Cookies
Sessions
Handling file uploads
Using remote files
Connection handling
Persistent Database Connections
Command line usage
Garbage Collection
DTrace Dynamic Tracing
Function Reference
Affecting PHP's Behaviour
Audio Formats Manipulation
Authentication Services
Command Line Specific Extensions
Compression and Archive Extensions
Cryptography Extensions
Database Extensions
Date and Time Related Extensions
File System Related Extensions
Human Language and Character Encoding Support
Image Processing and Generation
Mail Related Extensions
Mathematical Extensions
Non-Text MIME Output
Process Control Extensions
Other Basic Extensions
Other Services
Search Engine Extensions
Server Specific Extensions
Session Extensions
Text Processing
Variable and Type Related Extensions
Web Services
Windows Only Extensions
XML Manipulation
GUI Extensions
Keyboard Shortcuts
?
This help
j
Next menu item
k
Previous menu item
g p
Previous man page
g n
Next man page
G
Scroll to bottom
g g
Scroll to top
g h
Goto homepage
g s
Goto search
(current page)
/
Focus search box
简介 »
« expect://
序言
切换语言:
English
German
Spanish
French
Italian
Japanese
Brazilian Portuguese
Russian
Turkish
Ukrainian
Chinese (Simplified)
Other
安全
简介
总则
以 CGI 模式安装时
可能受到的攻击
情形一：只运行公开的文件
情形二：使用 cgi.force_redirect
情形三：设置 doc_root 或 user_dir
情形四：PHP 解释器放在 web 目录以外
以 Apache 模块安装时
会话（Session）安全
文件系统安全
空字符（Null bytes）相关问题
数据库安全
设计数据库
连接数据库
加密存储模型
SQL 注入
错误报告
用户提交的数据
隐藏 PHP
保持更新
发现了问题？
了解如何改进此页面
•
提交拉取请求
•
报告一个错误
＋
添加备注
用户贡献的备注
此页面尚无用户贡献的备注。
↑
and
↓
to navigate •
Enter
to select •
Esc
to close •
/
to open
Press
Enter
without selection to search using Google
