codeaudit-functions.md

September 12, 2017 · View on GitHub

php代码审计中的重要函数，总结自《代码审计：企业级web代码安全架构》

SQL注入

  1. magic_quotes_gpc
  2. addslashes
  3. mysql_real_escape_string
  4. intval

XSS

  1. print
  2. pirnt_r
  3. echo
  4. printf
  5. sprintf
  6. die
  7. var_dump
  8. var_export

文件包含

  1. include
  2. include_once
  3. require
  4. require_once

文件读取

  1. file_get_contents
  2. highlight_file
  3. fopen
  4. readfile
  5. fread
  6. fget
  7. fgets
  8. parse_ini_file
  9. show_source
  10. file

文件上传

  1. move_upload_file

代码执行

  1. eval
  2. assert
  3. preg_replace
  4. call_user_func
  5. call_user_func_array
  6. array_map

命令执行

  1. system
  2. exec
  3. shell_exec
  4. passthru
  5. pcntl_exec
  6. popen
  7. proc_open

变量覆盖

  1. ectract
  2. parse_str
  3. import_request_variables

mysql报错注入

  1. floor
  2. updatexml
  3. extractvalue
  4. GeometryCollection
  5. polygon
  6. multipoint
  7. multilinestring
  8. multipolygon
  9. linestring
  10. exp

php安全编码

  1. addslashes
  2. mysql_real_escape_string
  3. mysql_escape_string
  4. str_replace
  5. strops
  6. htmlspecialchars
  7. strip_args

防止命令注入

  1. escapeshellcmd
  2. escapeshellarg