论坛首页 > CTF&WP专版

表单验证加小小防护

weidong · 发表于 2020-01-25 22:56:52 · CTF&WP专版

```php
<meta.charset='GBK'>
<center>
 <h3>后台登入<h3>
<form action="1.php" method="$_REQUEST">
账号:<input name='username' type='text'><br />
密码:<input name='password' type='password'><br />
<input type='submit' value='登入'>
<center>
</form>

<?php
@$username = $_REQUEST['username'];
@$password = $_REQUEST['password'];
if(stristr($username,'\''
)){die("有非法字符请重新输入");}
if(stristr($password,'\'')){die("有非法字符请重新输入");}
$conn = mysqli_connect('127.0.0.1','root','root','db_name');
$sql = "select*from admin where user='$username' and password='$password'";
$a = mysqli_query($conn,$sql);
$d = mysqli_fetch_array($a);
if($d['user'] === $username and $d['password']===$password){
 echo "登录成功";
}
else{echo "用户名或密码错误";}
?>
```

![](https://bbs.zkaq.cn/upload/md/a8a7cf33e3b22226d335422e721bc0e0_32798.jpg)

![](https://bbs.zkaq.cn/upload/md/257a587de93da4f9217ffea6b235c246_92833.jpg)

![](https://bbs.zkaq.cn/upload/md/05332da85da9bec787408f9ee9eb3158_48795.jpg)

![](https://bbs.zkaq.cn/upload/md/fe9e6392349702915ccc2f360ea14ca7_54006.jpg)

打赏我,让我更有动力~

0 条回复 | 直到 2020-1-25 | 997 次浏览

登录后才可发表内容