Author:Yaseng Team:CodePlay 1:code auditing
PHPDISK network disk system is for domestic use wide range of PHP and MySQL to build the network drive(file storage management)system,The author of its source code analysis,found a very interesting stuff.....
Figure A is install 下面 的 index.php the program installation file. Fancy starting a normal code,when the system is installed,generate a lock file,again to perform the install when the judge ,here he is with a Header,and wood exit. However the php in the header to jump after the code or backward to perform,can directly post data in the past,then look at this file.
The installation process all by$step,and step again can be against the POST control. Keep looking you can use of
$str = "<? php". LF. LF;
$str .= "// This is PHPDISK auto-generated file. Do NOT modify me.". LF. LF;