PHP-Audit-Labs/Part1/Day4/files/9.png

hongriSec / PHP-Audit-Labs

一个关于PHP的代码审计项目

1.81k stars 335 forks source link

Open fangyi-zhou opened 6 years ago

fangyi-zhou commented 6 years ago

Note the extra ; after the if condition, the echo statement will always execute.

hongriSec commented 6 years ago

Note the extra ; after the if condition, the echo statement will always execute.

Thank you for your correction, we have modified the mistake code on the PHP-Audit-Labs/Part1/Day4/files/9.png.

fangyi-zhou commented 6 years ago

I believe the fixed version is still not correct

$ php -a
php > if ("1"=="0") echo "ok";
php >