漏洞原理---PHP特性&缺陷对比函数

PHP特性&缺陷&过滤函数

一、常见过滤函数

==与===

=：赋值
==：弱类型对比
===：类型也会对比

<?php
$flag = "欢迎吃瓜~~~~";
$String = "^_^";
$error = "Waring !!!!";
if($_GET['name'] != $_GET['password']){
    if(MD5($_GET['name']) == MD5($_GET['password'])){
        echo $flag;
    }else{
        echo $String;
    }
}else{
    echo $error;
}

// name = QNKCDZO           0E830400451993494058024219903391
// Password = 240610708     0E462097431906509019562988736854

<?php
$flag = "欢迎吃瓜~~~~";
$String = "^_^";
$error = "Waring !!!!";
if($_GET['name'] != $_GET['password']){
    if(MD5($_GET['name']) === MD5($_GET['password'])){
        echo $flag;
    }else{
        echo $String;
    }
}else{
    echo $error;
}
TEXT